Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMFF863D468B7C286912119BF3F9D68D0BCC705D63259DECE6574AE9995300CE83
HistoryNov 07, 2023 - 9:39 p.m.

Security Bulletin: An unspecified IBM SDK, Java Technology Edition vulnerability affects InfoSphere Data Replication

2023-11-0721:39:04
www.ibm.com
6
ibm
java technology
infosphere data replication
vulnerability
update
fix pack

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

52.1%

JSON

Summary

An unspecified IBM SDK, Java Technology Edition vulnerability is addressed.

Vulnerability Details

CVEID:CVE-2022-21626
**DESCRIPTION:**An unspecified vulnerability in Java SE related to the Security component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown attack vectors.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/238689 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
InfoSphere Data Replication 11.4.0
InfoSphere Data Replication 11.4

Remediation/Fixes

Update to the latest offering fix pack found here:

https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%3FInformation%20Management&product=ibm/Information+Management/IBM+InfoSphere+Data+Replication&release=11.4&platform=All&function=all&source=fc

Workarounds and Mitigations

None

CPENameOperatorVersion
infosphere change data captureeq11.4

Related

prion 1
ibm 75
alpinelinux 1
osv 10
openvas 16
redhatcve 1
debiancve 1
cve 1
veracode 1
ubuntucve 1
cbl_mariner 1
nessus 43
redhat 18
almalinux 5
oraclelinux 6
centos 2
amazon 4
fedora 5
rocky 4
f5 1
broadcom 1
ubuntu 1
prion
prion
Buffer overflow
2022-10-18 21:15:00
ibm
ibm
Security Bulletin: A vulnerability in the IBM Java Runtime affects IBM Rational ClearCase (CVE-2022-21626)
2023-01-31 13:55:53
Security Bulletin: A CVE-2022-21626 vulnerability in IBM Java Runtime affects IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow
2023-01-20 21:34:04
Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to a denial of service due to IBM Runtime Environment Java Technology Edition (CVE-2022-21626)
2023-02-01 15:09:09
alpinelinux
alpinelinux
CVE-2022-21626
2022-10-18 21:15:00
osv
osv
CVE-2022-21626
2022-10-18 21:15:13
Moderate: java-1.8.0-openjdk security update
2022-10-20 07:34:19
Moderate: java-1.8.0-openjdk security update
2022-10-20 00:00:00
openvas
openvas
Oracle Java SE Security Update (oct2022) 04 - Linux
2022-10-19 00:00:00
Oracle Java SE Security Update (oct2022) 04 - Windows
2022-10-19 00:00:00
Oracle OpenJDK Unspecified Vulnerability (Oct 2022)
2022-10-19 00:00:00
redhatcve
redhatcve
CVE-2022-21626
2022-10-19 09:47:41
debiancve
debiancve
CVE-2022-21626
2022-10-18 21:15:00
cve
cve
CVE-2022-21626
2022-10-18 21:15:00
veracode
veracode
Improper Access Control
2022-10-23 18:35:29
ubuntucve
ubuntucve
CVE-2022-21626
2022-10-18 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-21626 affecting package openjdk8 1.8.0.332-2
2024-04-29 03:06:37
nessus
nessus
Amazon Corretto Java 8.x < 8.352.08.1 Multiple Vulnerabilities
2022-10-18 00:00:00
EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2023-1506)
2023-03-08 00:00:00
Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2023-1697)
2023-03-07 00:00:00
redhat
redhat
(RHSA-2023:0128) Moderate: java-1.8.0-ibm security update
2023-01-12 08:29:37
(RHSA-2022:7049) Moderate: OpenJDK 8u352 Windows Security Update
2022-10-20 10:07:20
(RHSA-2022:7005) Moderate: java-1.8.0-openjdk security update
2022-10-19 21:10:14
almalinux
almalinux
Moderate: java-1.8.0-openjdk security update
2022-10-19 00:00:00
Moderate: java-1.8.0-openjdk security update
2022-10-20 00:00:00
Moderate: java-11-openjdk security and bug fix update
2022-10-19 00:00:00
oraclelinux
oraclelinux
java-1.8.0-openjdk security update
2022-10-21 00:00:00
java-1.8.0-openjdk security update
2022-10-21 00:00:00
java-1.8.0-openjdk security and bug fix update
2022-10-21 00:00:00
centos
centos
java security update
2022-10-26 14:19:03
java security update
2022-10-26 14:18:08
amazon
amazon
Medium: java-1.8.0-openjdk
2023-01-31 20:44:00
Medium: java-1.8.0-openjdk
2023-01-30 16:02:00
Medium: java-1.8.0-openjdk
2023-03-02 20:22:00
fedora
fedora
[SECURITY] Fedora 37 Update: java-1.8.0-openjdk-1.8.0.352.b08-2.fc37
2022-11-10 22:53:40
[SECURITY] Fedora 36 Update: java-1.8.0-openjdk-1.8.0.352.b08-2.fc36
2022-11-03 15:58:42
[SECURITY] Fedora 35 Update: java-1.8.0-openjdk-1.8.0.352.b08-2.fc35
2022-11-03 15:31:20
rocky
rocky
java-1.8.0-openjdk security update
2022-10-20 07:34:19
java-1.8.0-openjdk security update
2022-10-19 21:13:39
java-17-openjdk security and bug fix update
2022-10-20 07:37:48
f5
f5
K46859523 : Multiple Java vulnerabilities
2022-10-21 00:00:00
broadcom
broadcom
Azul Zulu Java Multiple Vulnerabilities (CVE-2022-21618 CVE-2022-21619 CVE-2022-21624 CVE-2022-21626 CVE-2022-21628 CVE-2022-39399)
2023-08-29 00:00:00
ubuntu
ubuntu
OpenJDK vulnerabilities
2022-11-09 00:00:00

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

6 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

52.1%

JSON
Related for FF863D468B7C286912119BF3F9D68D0BCC705D63259DECE6574AE9995300CE83
prion1ibm75alpinelinux1osv10openvas16redhatcve1debiancve1cve1veracode1ubuntucve1cbl_mariner1nessus43redhat18almalinux5oraclelinux6centos2amazon4fedora5rocky4f51broadcom1ubuntu1