PT-2022-2876

🗓️ 11 Jun 2020 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Vulnerable Apache Tomcat versions may lead to denial of service due to EncryptInterceptor misconfiguration.

Reporter	Title	Published	Views	Family All 14216
IBM Security Bulletins	Security Bulletin: There are several vulnerabilities in Bootstrap used by IBM Maximo Asset Management	4 Apr 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin:IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl, pcre2 and Golang Go	31 Aug 202216:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling was built with a vulnerable golang compiler. ( CVE-2023-29406, CVE-2023-29409 )	6 Dec 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Mar 202503:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in BigFix Platform shipped with IBM License Metric Tool.	24 Jul 202008:16	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-site Scripting and Vulnerable library - JQuery v1.11.1 affects IBM Engineering Workflow Management	15 Jul 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Node.js vulnerabilities [ CVE-2024-27982, CVE-2024-27983]	4 Feb 202519:31	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-29406
github	www.github.com/v3153/CVE-2024-50379-POC
access	www.access.redhat.com/security/cve/CVE-2023-28708
access	www.access.redhat.com/security/cve/CVE-2023-42794
otx	www.otx.alienvault.com/pulse/5e973946469296827b671df8
ubuntu	www.ubuntu.com/security/CVE-2020-9484
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33037
github	www.github.com/twbs/bootstrap/issues/26628
github	www.github.com/twbs/bootstrap/issues/20184

10 Dec 2025 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 27.8 - 10

CVSS 38.2 - 9.8

CVSS 3.19.8 - 10

EPSS0.99999

SSVC