CVE-2018-1474

CVE-2018-1474 describes an HTTP response splitting vulnerability in IBM BigFix Platform versions 9.2.0 through 9.2.14 and 9.5 through 9.5.9, stemming from improper validation of user-supplied input. An attacker could exploit this by injecting arbitrary HTTP headers to cause a split response, leading to further attacks like web cache poisoning or cross-site scripting, and potential information disclosure. The vulnerability has a CVSS v3 score of 4.7 (Medium), indicating a network-based attack requiring user interaction, with low impact on integrity and no impact on confidentiality or availability. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, no public exploit code available (Metasploit, Nuclei, ExploitDB), and it has garnered no community discussion or media coverage, indicating a low level of attention and perceived threat.