Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2024-20918, CVE-2024-20921 and CVE-2023-33850 were disclosed in the Oracle 2024 Critical Patch Update. Vulnerability Details CVEID:CVE-2024-20918 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause high confidentialit...

Security Bulletin: CVE-2022-40609 may affect Java Technology Edition used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2022-40609 vulnerability in Java Technology Edition could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw by sending specially-crafted data. Vulnerability Details CVEID:CVE-2022-40609 DESCRIPTION: IBM SDK, Java Technology Editi...

Security Bulletin: WebSphere Application Server is vulnerable to SOAPAction spoofing when processing JAX-WS Web Services requests which affects Content Collector for Email

Summary WebSphere Application Server is vulnerable to SOAPAction spoofing when processing JAX-WS Web Services requests. Vulnerability Details CVEID:CVE-2022-38712 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2022-21341...

Security Bulletin: WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability and affects Content Collector for Email

Summary WebSphere Application Server is vulnerable to a Privilege Escalation vulnerability Vulnerability Details CVEID: CVE-2021-38951 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote...

Security Bulletin: Vulnerability in Apache Log4j affects Content Collector for Email (CVE-2021-45105)

Summary Apache Log4j open source library is used by Content Collector for Email. This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the failure to protec...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35657)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID:CVE-2021-35657 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35661)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35661 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35662).

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35662 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35658)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35658 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35574)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35574 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35659)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35659 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35656)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID:CVE-2021-35656 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35660)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID:CVE-2021-35660 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerability in Apache Log4j affects Content Collector for Email (CVE-2021-44228)

Summary Apache Log4j open source library is used by Content Collector for Email. The vulnerability affects the Content Collector AFUKnowledgeCenter component. This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apac...

Security Bulletin: Multiple vulnerabilities in Apache HttpComponents and HttpCommons affect embedded WebSphere Application Server, which affects Content Collector for Email

Summary Multiple vulnerabilities in Apache HttpComponents and HttpCommons affect embedded WebSphere Application Server affects Content Collector for Email. Vulnerability Details CVEID: CVE-2015-5262 DESCRIPTION: Apache Commons is vulnerable to a denial of service, caused by the failure to apply a...

Security Bulletin: Embedded WebSphere Application Server is vulnerable to Server-side Request Forgery and affects Content Collector for Email

Summary Embedded WebSphere Application Server is vulnerable to a Server-side Request Forgery vulnerability. Vulnerability Details CVEID: CVE-2021-20480 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery SSRF. By sending a specially crafted...

Security Bulletin: Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability affects Content Collector for Email

Summary Embedded WebSphere Application Server is vulnerable to an XML External Entity XXE Injection vulnerability. Vulnerability Details CVEID: CVE-2021-20353 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection XXE attack when...

Security Bulletin: Embedded WebSphere Application Server is vulnerable to an information disclosure vulnerability affects Content Collector for Email

Summary IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. Vulnerability Details CVEID: CVE-2020-4576 DESCRIPTION: IBM WebSphere Application Server 7.5, 8.0, 8.5...

Security Bulletin: Embedded WebSphere Application Server is vulnerable to an information disclosure vulnerability affects Content Collector for Email

Summary IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. Vulnerability Details CVEID: CVE-2020-462...