CVE-2021-20369: Inadequate Encryption Strength

IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195361...

PT-2021-13914

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2021-13955

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue could disclose sensitive information to a malicious attacker by accessing data stored in memory. Recommendations: For IBM Cloud Pak for Applications version 4.3, at the moment,...

PT-2021-13957

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against th...

PT-2021-13913

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2021-20294

Name of the Vulnerable Software and Affected Versions: Mendix Applications using Mendix 7 versions prior to 7.23.22 Mendix Applications using Mendix 8 versions prior to 8.18.7 Mendix Applications using Mendix 9 versions prior to 9.3.0 Description: A security issue has been found that allows write...

PT-2021-13911

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information. Recommendations: For IBM Cloud Pa...

PT-2021-13918

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

PT-2021-13912

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Applications version 4.3 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2021-20361: Improper Neutralization of Input During Web Page Generation

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195032...

CVE-2021-20362: Improper Neutralization of Input During Web Page Generation

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195033...

IBM Cloud Pak for Applications Cross-Site Scripting Vulnerabilities

IBM Cloud Pak for Applications is an application from IBM America, Inc. It provides a cloud-native development solution that delivers value quickly. A cross-site scripting vulnerability exists in IBM Cloud Pak for Applications, which stems from the product's lack of effective validation of...

CVE-2021-20424

IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309...

IBM Cloud Pak for Automation Cross-Site Script Vulnerabilities

IBM Cloud Pak for Automation is an intelligent software platform used to build automation applications in cloud environments from IBM USA. The platform uses pre-integrated automation technologies and low-code tools to design, build, and run automation applications and services on any cloud.A...

IBM Cloud Pak for Applications Cross-Site Scripting Vulnerabilities

IBM Cloud Pak for Applications is an application from IBM USA, Inc. IBM Cloud Pak for Applications has a security vulnerability that stems from the fact that Cloud Pak for Applications allows users to embed arbitrary JavaScript code in the Web UI to change the intended functionality. An attacker...

IBM Cloud Pak for Applications encryption vulnerabilities

IBM Cloud Pak for Applications is an application from IBM USA, Inc. IBM Cloud Pak for Applications v4.3 contains a security vulnerability that stems from the fact that IBM Cloud Pak for Applications uses a weaker-than-expected encryption algorithm, which could be exploited by an attacker to decry...

CVE-2021-20360

IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195031...

CVE-2021-20363

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034...

Samsung Members Access Control Error Vulnerability (CNVD-2021-51436)

Samsung Members is a community platform app from Samsung South Korea. An access control error vulnerability exists in Samsung Members. The vulnerability allows untrusted applications to cause local file inclusion in a webview. No detailed vulnerability details are provided at this time...

XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55195)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...