17604 matches found
Design/Logic Flaw
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...
CVE-2021-33718
CVE-2021-33718 affects Mendix-based applications across Mendix 7 (<7.23.22), 8 (<8.18.7), and 9 (
CVE-2021-33718
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...
PT-2021-13955
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue could disclose sensitive information to a malicious attacker by accessing data stored in memory. Recommendations: For IBM Cloud Pak for Applications version 4.3, at the moment,...
PT-2021-13914
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...
CVE-2021-33718: Incorrect Authorization
A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.22, Mendix Applications using Mendix 8 All versions V8.18.7, Mendix Applications using Mendix 9 All versions V9.3.0. Write access checks of attributes of an object could be bypassed, if user has a write...
CVE-2021-20364: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195035...
CVE-2021-20363: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034...
CVE-2021-20362: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033...
CVE-2021-20361: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032...
CVE-2021-20360: Inadequate Encryption Strength
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031...
CVE-2021-20423: Incorrect Permission Assignment for Critical Resource
IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions. IBM X-Force ID: 196308...
CVE-2021-20368: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195357...
CVE-2021-20366: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195037...
CVE-2021-20365: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036...
CVE-2021-20424: Generation of Error Message Containing Sensitive Information
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309...
CVE-2021-20422: Undefined Security Weakness
IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. IBM X-Force ID: 196304...
CVE-2021-20369: Inadequate Encryption Strength
IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361...
PT-2021-13956
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows an authenticated user to gain escalated privileges due to improper application permissions. Recommendations: For IBM Cloud Pak for Applications version 4.3, update the...
PT-2021-13916
Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...