Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM43BD66A891FDF399124F87174A7745DFB775BCB719DC37C3FD4D4FA55F3FE7EA
HistoryJul 04, 2022 - 7:16 p.m.

Security Bulletin: A security vulnerability has been identified in Apache poi-scratchpad shipped with IBM Tivoli Netcool Impact (CVE-2022-26336)

2022-07-0419:16:39
www.ibm.com
9

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.4%

JSON

Summary

Apache poi-scratchpad is shipped with IBM Tivoli Netcool Impact. Information about a security vulnerability affecting Apache poi-scratchpad has been published in a security bulletin.

Vulnerability Details

CVEID:CVE-2022-26336
**DESCRIPTION:**Apache POI is vulnerable to a denial of service, caused by an out of memory exception flaw in the HMEF package. By persuading a victim to open a specially-crafted TNEF file, a remote attacker could exploit this vulnerability to cause the server to crash.
CVSS Base score: 5.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/221045 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Tivoli Netcool Impact 7.1.0

Remediation/Fixes

Product VRMF APAR Remediation
IBM Tivoli Netcool Impact 7.1.0 7.1.0.26 IJ40288 Upgrade to IBM Tivoli Netcool Impact 7.1.0 FP26

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmtivoli_netcool\/impactMatch7.1.0
CPENameOperatorVersion
tivoli netcool/impacteq7.1.0

Related

osv 2
veracode 1
ibm 6
redhatcve 1
cvelist 1
ubuntucve 1
nvd 1
github 1
prion 1
cve 1
adobe 1
redhat 1
oracle 2
osv
osv
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
2022-03-05 00:00:44
CVE-2022-26336
2022-03-04 16:15:10
veracode
veracode
Denial Of Service (DoS)
2022-03-07 02:49:35
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Apache POI
2022-04-27 14:54:07
Security Bulletin: IBM Decision Optimization for Cloud Pak for Data is vulnerable to a denial of service (CVE-2022-26336)
2024-06-20 08:44:53
Security Bulletin: Apache POI is vulnerable to a denial of service, caused by an out of memory exception flaw in the HMEF package(CVE-2022-26336)
2023-02-07 13:51:16
redhatcve
redhatcve
CVE-2022-26336
2022-03-11 18:14:31
cvelist
cvelist
CVE-2022-26336 A carefully crafted TNEF file can cause an out of memory exception
2022-03-04 00:00:00
ubuntucve
ubuntucve
CVE-2022-26336
2022-03-04 00:00:00
nvd
nvd
CVE-2022-26336
2022-03-04 16:15:10
github
github
Improper Input Validation and Allocation of Resources Without Limits or Throttling in poi-scratchpad
2022-03-05 00:00:44
prion
prion
Code injection
2022-03-04 16:15:00
cve
cve
CVE-2022-26336
2022-03-04 16:15:10
adobe
adobe
APSB23-31 : Security update available for Adobe Experience Manager
2023-06-13 00:00:00
redhat
redhat
(RHSA-2022:5532) Important: Red Hat Fuse 7.11.0 release and security update
2022-07-07 14:16:35
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

18.4%

JSON
Related for 43BD66A891FDF399124F87174A7745DFB775BCB719DC37C3FD4D4FA55F3FE7EA
osv2veracode1ibm6redhatcve1cvelist1ubuntucve1nvd1github1prion1cve1adobe1redhat1oracle2