PT-2017-4100 · Moment.Js +2 · Moment +2

🗓️ 08 Sep 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Moment.js regex denial of service from crafted date strings; earlier versions affected; upgrade to 2.19.3 or later.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 9.0.1	16 Nov 202315:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE) (CVE-2017-18214, CVE-2016-4055, CVE-2021-20413)	25 Jun 202109:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in moment.js affect IBM Storage Scale	8 May 202407:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is vulnerable to a denial of service vulnerability in Angular.js	8 Jul 202120:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in moment.js used by IBM Jazz Reporting Service (JRS) (CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2022-31129)	8 Jan 202507:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Conductor 2.5.0	20 Feb 202106:41	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in moment.js used by IBM Jazz Reporting Service (CVE-2022-24785)	4 Oct 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	28 May 202122:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace is affected by multiple vulnerabilities (CVE-2022-22968, CVE-2022-24785, CVE-2017-18214, CVE-2016-4055, CVE-2018-1000613, CVE-2020-15522, CVE-2018-1000180, CVE-2020-26939, CVE-2022-22314)	26 Mar 202502:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar DNS Analyzer App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2022-31129, CVE-2022-24785, CVE-2017-18214)	5 Oct 202222:40	–	ibm

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.org/CVERecord
ubuntu	www.ubuntu.com/security/CVE-2017-18214
ubuntu	www.ubuntu.com/security/notices/USN-4786-1
tenable	www.tenable.com/security/tns-2019-02
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/USN-4786-1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2017-18214
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-18214
ubuntu	www.ubuntu.com/security/CVE-2016-4055

27 Nov 2024 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.17.5

CVSS 27.8

EPSS0.02708