Total vulnerabilities in the database
The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.
| Software | From | Fixed in |
|---|---|---|
| ibm / omnifind | 9.0 | 9.0.x |
| ibm / omnifind | 8.0 | 8.0.x |
| ibm / omnifind | 8.5 | 8.5.x |
| ibm / omnifind | 8.4 | 8.4.x |
| ibm / omnifind | 9.1 | 9.1.x |