Lucene search

Security Bulletin: Multiple vulnerabilities in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2023-20860, CVE-2023-20861).

🗓️ 10 May 2023 04:09:23Reported by IBMType

ibm🔗 www.ibm.com👁 42 Views

IBM Tivoli Application Dependency Discovery Manager vulnerabilities fixed via Spring upgrade to 5.3.2

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in VMware Tanzu Spring Framework	2 May 202322:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Framework [CVE-2023-20861, CVE-2023-20860]	12 Feb 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework security bypass and denial of service vulnerabilities [CVE-2023-20860, CVE-2023-20861]	6 Jul 202318:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator affected by multiples issues due to Spring Framework	28 Nov 202319:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)	28 Jun 202320:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in VMware Tanzu Spring Framework [CVE-2023-20860]	28 Jun 202319:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX is affected by security restriction bypass due to Spring Framework [CVE-2023-20860]	18 May 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is affected by a security restrictions bypass due to Spring Framework [CVE-2023-20860]	19 May 202309:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Framework affects IBM Process Mining [CVE-2023-20860]	29 May 202313:35	–	ibm

Vulners

Node

ibm tivoli_application_dependency_discovery_managerMatch7.3.0.0

ibm tivoli_application_dependency_discovery_managerMatch7.3.0.8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 May 2023 04:23Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001

ibm tivoli application security spring upgrade denial of service bypass cve-2023-20861 cve-2023-20860