CVE-2023-35792

Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting XSS...

CVE-2023-35792

Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-site Scripting XSS...

CVE-2023-35791

Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerability...

Vound Intella Connect 跨站脚本漏洞

Vound Intella Connect is a browser-based web review platform from Vound. A security vulnerability exists in Vound Intella Connect version 2.6.0.3 that stems from the presence of a stored cross-site scripting XSS vulnerability...

CVE-2023-35792

Affected software: Vound Intella Connect 2.6.0.3. Vulnerability: stored Cross-site Scripting (XSS) in the application. Root cause/impact details are not expanded beyond “stored XSS” in provided documents. Exploitation status is not stated in the CVE entry; several connected records reiterate the ...

PT-2023-25317 · Vound · Intella Connect

Name of the Vulnerable Software and Affected Versions: Vound Intella Connect version 2.6.0.3 Description: The issue is related to stored Cross-site Scripting XSS, which allows attackers to inject malicious scripts into content from otherwise trusted websites. Recommendations: For version 2.6.0.3,...

CVE-2023-35791

CVE-2023-35791 affects Vound Intella Connect 2.6.0.3 with an Open Redirect vulnerability. The NVD/CVE entries report a network-based vector with low confidentiality/integrity impact and no availability impact, base score 6.1 (Medium). The provided documents do not include exploit details, affecte...

PT-2023-25316 · Vound · Intella Connect

Name of the Vulnerable Software and Affected Versions: Vound Intella Connect version 2.6.0.3 Description: The issue is related to an Open Redirect vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

Security Bulletin: IBM App Connect for Manufacturing is vulnerable to a remote attack due to Bouncy Castle (CVE-2023-33201)

Summary IBM App Connect for Manufacturing is vulnerable to a remote attack due to Bouncy Castle Crypto Package for Java CVE-2023-33201. The fix includes version =1.74. Vulnerability Details CVEID:CVE-2023-33201 DESCRIPTION: The Bouncy Castle Crypto Package For Java bc-java could allow a remote...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to multiple CVEs in Avahi

Summary Avahi is not used directly by IBM App Connect Enterprise Certified Container but is present in the DesignerAuthoring operand images. Avahi is vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Avahi. CVE-2023-38469,...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-3576]

Summary libtiff is not used directly by IBM App Connect Enterprise Certified Container but is present in one of the DesignerAuthoring images. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service. This bulletin...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to loss of confidentiality and loss of integrity due to [CVE-2023-31124], [CVE-2023-31130], [CVE-2023-31147]

Summary c-ares is cross-compiled with the Node.js runtime in the Red Hat Universal Base Images used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container Dashboard and DesignerAuthoring operands are vulnerable to loss of confidentiality and loss of...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to loss of confidentiality due to [CVE-2023-2976]

Summary Google Guava is used by IBM App Connect Enterprise Certified Container by mapping assistance. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to loss of confidentiality. This bulletin provides patch information to addres...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service and arbitrary code execution due to [CVE-2022-4904], [CVE-2023-32067]

Summary c-ares is cross-compiled with the Node.js runtime in the Red Hat Universal Base Images used by IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container Dashboard and DesignerAuthoring operands are vulnerable to denial of service and arbitrary code...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to denial of service due to [CVE-2017-6519]

Summary Avahi is not used directly by IBM App Connect Enterprise Certified Container but is present in the DesignerAuthoring operand images. Avahi is vulnerable to denial of service. This bulletin provides patch information to address the reported vulnerability in Avahi. CVE-2017-6519 Vulnerabili...

Security Bulletin: IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Kafka nodes are vulnerable to denial of service due to [CVE-2023-34453], [CVE-2023-34454], [CVE-2023-34455]

Summary Java component snappy-java is used by Kafka in IBM App Connect Enterprise Certified Container. IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that use Kafka nodes are vulnerable to denial of service. This bulletin provides patch informatio...

Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to privilege escalation due to [CVE-2023-29403]

Summary The IBM App Connect Enterprise Certified Container operator is written in Golang Go, as are parts of the ace-server application. IBM App Connect Enterprise Certified Container operator and operands are vulnerable to privilege escalation. This bulletin provides patch information to address...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to server-side request forgery due to [CVE-2023-28155]

Summary Node.js module Request is used by IBM App Connect Enterprise Certified Container operands for both internal and external HTTP calls. IBM App Connect Enterprise Certified Container operands are vulnerable to server-side request forgery. This bulletin provides patch information to address t...

Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and loss of confidentiality due to multiple vulnerabilities in libtiff

Summary libtiff is not used directly by IBM App Connect Enterprise Certified Container but is present in one of the DesignerAuthoring images. IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service and loss of...

Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to privilege elevation due to [CVE-2023-26604]

Summary systemd is not used directly by IBM App Connect Enterprise Certified Container but is in the images as part of the base operating system. IBM App Connect Enterprise Certified Container operands are vulnerable to privilege elevation. This bulletin provides patch information to address the...