Ibm Omnifind vulnerabilities

• ibm omnifind Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9... CVE-2010-4236 Public exploit 6.9 MediumNovember 12, 2010
• ibm omnifind IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth... CVE-2010-3899 Public exploit 5.0 MediumNovember 12, 2010
• ibm omnifind IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of... CVE-2010-3898 5.0 MediumNovember 12, 2010
• ibm omnifind ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the... CVE-2010-3897 5.0 MediumNovember 12, 2010
• ibm omnifind The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not... CVE-2010-3896 7.5 HighNovember 12, 2010
• ibm omnifind esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges... CVE-2010-3895 Public exploit 7.2 HighNovember 12, 2010
• ibm omnifind Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt... CVE-2010-3894 Public exploit EPSS 12.0% 9.3 HighNovember 12, 2010
• ibm omnifind The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use... CVE-2010-3893 Public exploit 7.5 HighNovember 12, 2010
• ibm omnifind Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind... CVE-2010-3892 6.8 MediumNovember 12, 2010
• ibm omnifind Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator... CVE-2010-3891 Public exploit 6.8 MediumNovember 12, 2010
• ibm omnifind Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows... CVE-2010-3890 4.3 MediumNovember 12, 2010