Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-06	CVE-2018-1525	Cleartext Transmission of Sensitive Information vulnerability in IBM I2 Enterprise Insight Analysis 2.1.7/2.1.8 IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. network high complexity ibm CWE-319	5.9
2018-12-06	CVE-2018-1504	Improper Input Validation vulnerability in IBM I2 Enterprise Insight Analysis 2.1.7/2.1.8 IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. network low complexity ibm CWE-20	6.1