K24444803: Node.js vulnerabilities CVE-2015-8860, CVE-2015-8856, CVE-2016-7099, and CVE-2016-5325

🗓️ 21 Feb 2023 18:55:20Reported by f5Type

f5🔗 my.f5.com👁 59 Views

Node.js vulnerabilities related to tar, serve-index, tls.checkServerIdentity, and ServerResponse#writeHead functions

Reporter	Title	Published	Views	Family All 141
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities may affect IBM® SDK for Node.js™ in IBM Bluemix	9 Aug 201804:20	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in IBM SDK for Node.js might affect IBM Business Process Manager (BPM) Configuration Editor	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities fixed in IBM Security Verify Governance - Identity Manager Virtual Appliance	30 Jun 202305:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Node.js affects IBM API Connect (CVE-2016-7099, CVE-2016-5325)	15 Jun 201807:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js affect IBM Rational Application Developer for WebSphere Software included in Rational Developer for i and Rational Developer for AIX and Linux	3 Aug 201804:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple OpenSSL and Non-OpenSSL vulnerabilities in Node.js included in Rational Application Developer for WebSphere Software	5 Feb 202000:09	–	ibm
IBM Security Bulletins	Security Bulletin: Current Releases of IBM® SDK for Node.js™ are affected by CVE-2015-8860	9 Aug 201804:20	–	ibm
CNVD	Joyent Node.js tar Sensitive Information Disclosure Vulnerability	24 Apr 201600:00	–	cnvd
CNVD	Joyent Node.js serve-index cross-site scripting vulnerability	24 Apr 201600:00	–	cnvd

21 Feb 2023 18:55Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

CVSS 3.16.1

CVSS 37.5

EPSS0.00985