Lucene search
IBMC2CB12DB04BE6EC907E9AE881B410ECC6C0C87D54668BE435AC17583F16CDBD3HistoryMay 21, 2024 - 7:42 p.m.
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager (CVE-2024-21094, CVE-2024-21085, CVE-2024-21011, CVE-2023-38264)
2024-05-2119:42:39
www.ibm.com
11
ibm
java
sdk
tivoli business service manager
vulnerabilities
upgrade
security bulletin
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
5
Confidence
High
EPSS
0.001
Percentile
20.6%
Summary
IBM® SDK, Java™ Technology Edition is shipped as a component of IBM Tivoli Business Service Manager. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| IBM Tivoli Business Service Manager | 6.2.0 |
Remediation/Fixes
| Principal Product and Version(s) | Affected Supporting Product and Version |
|---|---|
| IBM Tivoli Business Service Manager 6.2.0 | IBM strongly recommends addressing the vulnerability now by upgrading the Java SDK. |
Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition
- Upgrade to IBM® SDK, Java™ Technology Edition Version 8 Service Refresh 8 FP25, please follow How to upgrade JREs shipped with Tivoli Business Service Manager to upgrade.
Workarounds and Mitigations
None
Affected configurations
Node
ibmtivoli_business_service_managerMatch6.2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | tivoli_business_service_manager | 6.2.0 | cpe:2.3:a:ibm:tivoli_business_service_manager:6.2.0:*:*:*:*:*:*:* |
Related
ibm
ibm
nessus
nessus
IBM WebSphere eXtreme Scale 8.6.1.0 < 8.6.1.6 (7166876)
2024-08-29 00:00:00
SUSE SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2024:1845-1)
2024-05-30 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1859-1)
2024-08-20 00:00:00
openSUSE: Security Advisory for java (SUSE-SU-2024:1859-1)
2024-08-20 00:00:00
openSUSE: Security Advisory for java (SUSE-SU-2024:1451-1)
2024-05-07 00:00:00
osv
osv
openjdk-8 vulnerabilities
2024-06-06 01:46:19
java-1_8_0-openjdk-1.8.0.412-1.1 on GA media
2024-06-15 00:00:00
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
rocky
rocky
java-1.8.0-openjdk security update
2024-05-06 13:04:21
java-11-openjdk security update
2024-05-06 13:04:21
redhat
redhat
(RHSA-2024:1815) Moderate: OpenJDK 8u412 Security Update for Portable Linux Builds
2024-04-17 11:38:38
(RHSA-2024:1816) Moderate: OpenJDK 8u412 Windows Security Update
2024-04-17 11:38:35
(RHSA-2024:1818) Moderate: java-1.8.0-openjdk security update
2024-04-18 09:57:46
ubuntu
ubuntu
OpenJDK 8 vulnerabilities
2024-06-06 00:00:00
OpenJDK 11 vulnerabilities
2024-06-06 00:00:00
OpenJDK 21 vulnerabilities
2024-06-06 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2024-04-23 00:00:00
java-1.8.0-openjdk security update
2024-04-17 00:00:00
java-11-openjdk security update
2024-04-23 00:00:00
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2024-04-18 00:00:00
Moderate: java-11-openjdk security update
2024-04-22 00:00:00
Moderate: java-17-openjdk security update
2024-04-18 00:00:00
aix
aix
Multiple vulnerabilities in IBM Java SDK affect AIX
2024-06-24 15:10:30
debian
debian
[SECURITY] [DSA 5671-1] openjdk-11 security update
2024-04-22 08:40:05
[SECURITY] [DLA 3793-1] openjdk-11 security update
2024-04-22 13:47:10
[SECURITY] [DSA 5672-1] openjdk-17 security update
2024-04-22 14:23:20
f5
f5
amazon
amazon
Low: java-11-amazon-corretto
2024-04-24 22:15:00
Low: java-17-amazon-corretto
2024-04-24 22:15:00
Low: java-1.8.0-openjdk
2024-05-09 19:16:00
mageia
mageia
redhatcve
redhatcve
vulnrichment
vulnrichment
CVE-2023-38264 IBM SDK, Java Technology Edition denial of service
2024-05-10 17:21:51
CVE-2024-21085
2024-04-16 21:26:27
CVE-2024-21011
2024-04-16 21:26:01
cve
cve
nvd
nvd
cvelist
cvelist
CVE-2023-38264 IBM SDK, Java Technology Edition denial of service
2024-05-10 17:21:51
CVE-2024-21011
2024-04-16 21:26:01
CVE-2024-21085
2024-04-16 21:26:27
ubuntucve
ubuntucve
alpinelinux
alpinelinux
CVE-2024-21011
2024-04-16 22:15:15
CVE-2024-21085
2024-04-16 22:15:28
cgr
cgr
CVE-2024-21085 vulnerabilities
2024-05-19 03:07:16
CVE-2024-21094 vulnerabilities
2024-05-19 03:07:16
redos
redos
ROS-20240927-03
2024-09-27 00:00:00
debiancve
debiancve
CVE-2024-21085
2024-04-16 22:15:28
CVE-2024-21011
2024-04-16 22:15:15
wolfi
wolfi
CVE-2024-21085 vulnerabilities
2024-10-05 15:55:10
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
5
Confidence
High
EPSS
0.001
Percentile
20.6%
Related for C2CB12DB04BE6EC907E9AE881B410ECC6C0C87D54668BE435AC17583F16CDBD3