Lucene search

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to VMware Tanzu Spring Framework security bypass and denial of service vulnerabilities [CVE-2023-20860, CVE-2023-20861]

🗓️ 06 Jul 2023 18:00:07Reported by IBMType

ibm🔗 www.ibm.com👁 20 Views

IBM Watson Assistant for IBM Cloud Pak for Data vulnerable to VMware Tanzu Spring Framework security bypass and denial of service vulnerabilitie

Reporter	Title	Published	Views	Family All 104
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in VMware Tanzu Spring Framework	2 May 202322:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in VMware Tanzu Spring Framework [CVE-2023-20861, CVE-2023-20860]	12 Feb 202419:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2023-20860, CVE-2023-20861).	10 May 202304:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling B2B Integrator affected by multiples issues due to Spring Framework	28 Nov 202319:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in VMware Tanzu Spring Framework (CVE-2023-20861)	28 Jun 202320:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a security bypass in VMware Tanzu Spring Framework [CVE-2023-20860]	28 Jun 202319:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for UNIX is affected by security restriction bypass due to Spring Framework [CVE-2023-20860]	18 May 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is affected by a security restrictions bypass due to Spring Framework [CVE-2023-20860]	19 May 202309:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring Framework affects IBM Process Mining [CVE-2023-20860]	29 May 202313:35	–	ibm

Vulners

Node

ibm watson_developer_cloudMatch4.0.2

ibm watson_developer_cloudMatch4.0.4

ibm watson_developer_cloudMatch4.0.5

ibm watson_developer_cloudMatch4.0.6

ibm watson_developer_cloudMatch4.0.7

ibm watson_developer_cloudMatch4.0.8

ibm watson_developer_cloudMatch4.5.1

ibm watson_developer_cloudMatch4.5.3

ibm watson_developer_cloudMatch4.6.

ibm watson_developer_cloudMatch4.6.2

ibm watson_developer_cloudMatch4.6.3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Jul 2023 18:07Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.001