Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Planning Analytics.

Summary This Security Bulletin addresses multiple vulnerabilities that have been remediated in IBM Planning Analytics 2.0.6. There are multiple vulnerabilities in IBM® Runtime Environment Java™ used by IBM Planning Analytics 2.0.5 and lower. IBM Planning Analytics 2.0.6 has addressed the applicab...

CVE-2013-2637

CVE-2013-2637 describes a cross-site scripting (XSS) vulnerability in OTRS ITSM. The NVD/NVD-related entries state that an attacker could exploit an XSS via changes, workorder items, and FAQ articles, enabling a remote attacker to execute arbitrary code in affected systems. The vulnerability affe...

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2018-1028)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2018-1027)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2637

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Change Manager - web based. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access vi...

CVE-2020-2637

Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager component: Change Manager - web based. Supported versions that are affected are 12.1.0.5, 13.2.0.0 and 13.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access vi...

CVE-2020-2637

The CVE-2020-2637 vulnerability affects Oracle Enterprise Manager for Oracle Database (Change Manager – web based) versions 12.1.0.5, 13.2.0.0, and 13.3.0.0. Affects component: Change Manager web; root cause is not explicitly detailed in the provided documents beyond the described vulnerability. ...

CVE-2018-2637

It was discovered that the JMX component of OpenJDK failed to properly set the deserialization filter for the SingleEntryRegistry in certain cases. A remote attacker could possibly use this flaw to bypass intended deserialization restrictions...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

CVE-2019-2637

CVE-2019-2637 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) in versions 8.55, 8.56 and 8.57. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, with successful attacks potentially enabling una...

CVE-2019-2637

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2019-2637

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Core Technology. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

Photon OS 2.0: Openjdk8 PHSA-2018-2.0-0013

An update of the openjdk8 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0013. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2017-2637

CVE-2017-2637 describes a design flaw in the Red Hat OpenStack Platform director’s use of TripleO for enabling libvirtd live-migration. Libvirtd is deployed by default and listens on 0.0.0.0 with no authentication or encryption. A remote actor who can reach any compute host IP (including localhos...

Photon OS 2.0 : libtiff / openjdk8 / ruby (PhotonOS-PHSA-2018-2.0-0013) (deprecated)

An update of 'libtiff', 'openjdk8', 'ruby' packages of Photon OS has been released. C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2/7/2019 The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0013. The text itself is copyrig...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Integration Designer used in IBM Business Process Manager

Summary There are vulnerabilities in IBM SDK Java™ Technology Edition that is used by IBM Integration Designer in IBM Business Process Manager. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2633 DESCRIPTION: An unspecified...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, 7.1, and 8 that are used by AIX. These issues were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2639 DESCRIPTION: An unspecified vulnerability relat...

Security Bulletin: Multiple security vulnerabilities has been identified in IBM® Java SDK which affects Websphere Application Server shipped with Tivoli Integrated Portal

Summary Embedded Websphere Application Server eWAS v7.0.x is shipped as a component of Tivoli Integrated Portal TIP v2.1 and v2.2. The version of eWAS has been affected by multiple security vulnerabilities, as described below. Vulnerability Details CVEID: CVE-2018-2633 DESCRIPTION: An unspecified...

Security Bulletin: Vulnerability in IBM Java SDK affect eDiscovery Analyzer

Summary Vulnerability in IBM® SDK Java™ Technology Edition, Version 6 and IBM® Runtime Environment Java™ Version 6 used by eDiscovery Analyzer. These issue were disclosed as part of the IBM Java SDK updates in January 2018. Vulnerability Details CVEID: CVE-2018-2637 DESCRIPTION: An unspecified...