EUVD-2018-12007

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM GSKit uses weak cryptographic algorithms risking sensitive information decryption. IBM X-Force ID: 139073

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server affects Netezza Performance Portal	18 Oct 201903:36	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere DataPower Appliances is affected by multiple issues	11 Sep 201813:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple vulnerabilities	2 Jul 201902:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Metrics Manager 2018 Q1 Security Update: IBM Cognos Metrics Manager is affected by multiple vulnerabilities.	15 Jun 201823:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SiteProtector System is affected by GSKit vulnerabilities	19 Jul 201808:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM GSKit affect IBM Personal Communications	30 Jul 201817:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Content Collector for SAP Applications is affected by GSKit and GSKit-Crypto vulnerabilities	30 Aug 201812:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the GSKit component of Tivoli Netcool/OMNIbus	17 Jun 201815:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM GSKit component of IBM Spectrum Protect Snapshot (formerly Tivoli Storage FlashCopy Manager) for VMware	1 Feb 202211:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® is affected by multiple vulnerabilities in the GSKit library	11 Jul 201819:03	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "0bc43fac-29d2-3b4e-9140-ec81fe23986a",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "2dd2d4e7-c8b9-30f5-b711-06ec467a6dfb",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "11.1"
      },
      {
        "id": "3f60ad99-d7a3-3a88-99a7-79a944beddba",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "9.7"
      },
      {
        "id": "4da76429-7c6e-3e4a-8930-61f8c901a395",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.1"
      },
      {
        "id": "96d6a572-2993-313b-a87a-976f607faea2",
        "product": {
          "name": "Db2 for Linux, UNIX and Windows"
        },
        "product_version": "10.5"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/139073
ibm	www.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/103574
securitytracker	www.securitytracker.com/id/1041012
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

7.3High risk

Vulners AI Score7.3

CVSS 35.5 - 6.2

CVSS 22.1

EPSS0.00031