{"id":"CVE-2018-1387","aliases":["EUVD-2018-11966","GHSA-8hqc-hg34-fvxx"],"status":"published","title":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1...","description":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.0167,"percentile":0.76925,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-03-08T16:00:00Z","modified":"2026-06-17T01:51:08Z","products":[{"vendor":"ctfer-io","product":"monitoring"},{"vendor":"ibm","product":"application_performance_management"},{"vendor":"ibm","product":"cloud_apm_data_collector"},{"vendor":"ibm","product":"monitoring"}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg22014035","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/138210","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103403","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1387"},{"url":"https://github.com/advisories/GHSA-8hqc-hg34-fvxx"}],"sources":{"cve":[{"id":"CVE-2018-1387","description":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.","status":"published","published":"2018-03-08T16:00:00Z","modified":"2024-09-17T00:45:49.386Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11966","description":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.","status":"published","published":"2018-03-08T16:00:00Z","modified":"2024-09-17T00:45:49Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N","level":"medium"}],"updated_at":"2026-11-03T00:28:55.842484Z"}],"ghsa":[{"id":"GHSA-8hqc-hg34-fvxx","title":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1...","description":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.","status":"published","published":"2022-05-13T01:33:21Z","modified":"2023-02-01T05:08:33Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:47.846536Z"}],"nvd":[{"id":"CVE-2018-1387","description":"IBM Application Performance Management for Monitoring \u0026 Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210.","status":"published","published":"2018-03-08T16:29:00.313Z","modified":"2026-06-17T01:51:08.04Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:24.264003Z"}]}}