CVE-2021-20364

CVE-2021-20364 affects IBM Cloud Pak for Applications 4.3 with a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletin notes a fix is included in the product; no se...

CVE-2021-20363

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034...

CVE-2021-20363

IBM Cloud Pak for Applications 4.3 is affected by a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially exposing credentials within a trusted session. The official IBM advisory fixes this by updating to version 4.3.1, which prevents arbitrary J...

CVE-2021-20362

CVE-2021-20362 affects IBM Cloud Pak for Applications 4.3. The vulnerability is a cross-site scripting flaw in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. IBM’s advisory notes a fix in v4.3.1; no separate APAR ...

CVE-2021-20362

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033...

CVE-2021-20361

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032...

CVE-2021-20361

Summary (CVE-2021-20361): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting via a dynamically constructed href attribute in the Web UI, potentially allowing credential disclosure within a trusted session. The IBM security bulletin notes remediation in Cloud Pak for Applicat...

CVE-2021-20360

IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031...

CVE-2021-20360

CVE-2021-20360 affects IBM Cloud Pak for Applications v4.3. The vulnerability arises from using weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM’s bulletin for this issue notes that the problem is mitigated by upgrading to I...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 8 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 7 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

What is (SQLi) SQL Injection❓ — Types, Example and Prevention. Part 1

What is SQLi SQL Injection❓ — Types, Example and Prevention. Part 1 SQL injection concept Data is among the most crucial parts of every information system. Hence, organizations use databases that are fueled by applications on the web to get clients’ information. Now, it’s crucial to properly mana...

CVE-2021-33718

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...

Design/Logic Flaw

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...

CVE-2021-33718

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...

CVE-2021-33718

CVE-2021-33718 affects Mendix-based applications across Mendix 7 (<7.23.22), 8 (<8.18.7), and 9 (

SAP NetWeaver AS ABAP 安全漏洞

SAP NetWeaver AS ABAP Business Server is an application server for ABAP Advanced Business Application Programming from SAP, Germany. A security vulnerability exists in SAP NetWeaver AS ABAP and ABAP Platform, which stems from an information disclosure in the product. The following products and...

IBM Cloud Pak for Applications 信息泄露漏洞

IBM Cloud Pak for Applications is an application from IBM Corporation. An information disclosure vulnerability exists in IBM Cloud Pak for Applications, which stems from the fact that the system does not effectively restrict access to in-memory data, which could be exploited by an attacker to gai...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55195)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

CVE-2021-20363

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034...