17602 matches found
CVE-2021-20368
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195357...
CVE-2021-20366
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195037...
CVE-2021-20366
CVE-2021-20366 affects IBM Cloud Pak for Applications 4.x, where a cross-site scripting flaw allows embedding arbitrary JavaScript in the Web UI, potentially leading to credential disclosure within a trusted session. Root cause framed as input data validation exposure (IBM notes this as an input ...
CVE-2021-20365
Affected product: IBM Cloud Pak for Applications 4.3. The entry describes a Cross‑Site Scripting (XSS) vulnerability in the web UI that allows embedding arbitrary JavaScript, potentially exposing credentials in a trusted session. The root cause is XSS in the Web UI, with CVSS v3.0/3.1 base scores...
CVE-2021-20365
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036...
CVE-2021-20364
CVE-2021-20364 affects IBM Cloud Pak for Applications 4.3 with a cross-site scripting vulnerability in the Web UI that can allow an attacker to inject arbitrary JavaScript and potentially disclose credentials within a trusted session. The IBM bulletin notes a fix is included in the product; no se...
CVE-2021-20363
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034...
CVE-2021-20363
IBM Cloud Pak for Applications 4.3 is affected by a cross-site scripting vulnerability in the Web UI that allows embedding arbitrary JavaScript, potentially exposing credentials within a trusted session. The official IBM advisory fixes this by updating to version 4.3.1, which prevents arbitrary J...
CVE-2021-20362
CVE-2021-20362 affects IBM Cloud Pak for Applications 4.3. The vulnerability is a cross-site scripting flaw in the Web UI that could allow embedding arbitrary JavaScript, potentially leading to credential disclosure within a trusted session. IBM’s advisory notes a fix in v4.3.1; no separate APAR ...
CVE-2021-20362
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033...
CVE-2021-20361
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032...
CVE-2021-20361
Summary (CVE-2021-20361): IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting via a dynamically constructed href attribute in the Web UI, potentially allowing credential disclosure within a trusted session. The IBM security bulletin notes remediation in Cloud Pak for Applicat...
CVE-2021-20360
CVE-2021-20360 affects IBM Cloud Pak for Applications v4.3. The vulnerability arises from using weaker-than-expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. IBM’s bulletin for this issue notes that the problem is mitigated by upgrading to I...
CVE-2021-20360
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 8 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.8 on RHEL 7 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.3 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
What is (SQLi) SQL Injection❓ — Types, Example and Prevention. Part 1
What is SQLi SQL Injection❓ — Types, Example and Prevention. Part 1 SQL injection concept Data is among the most crucial parts of every information system. Hence, organizations use databases that are fueled by applications on the web to get clients’ information. Now, it’s crucial to properly mana...
CVE-2021-33718
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...
Design/Logic Flaw
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...