Security Bulletin: Vulnerabilities in IBM Rational Synergy's Help System (CVE-2013-0464, CVE-2013-0467, CVE-2013-0599)

Summary IBM Rational Synergy can be affected by three vulnerabilities in the IBM Eclipse Help System IEHS, which is used to display the IBM Rational Synergy help content. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow thi...

Security Bulletin: Rational Synergy can be affected by a vulnerabilities in JSSE components (CVE-2013-0440, CVE-2013-0443, CVE-2013-1571, CVE-2013-0169)

Summary IBM Rational Synergy can be affected by the following vulnerabilities which exist in the IBM Java SDK that is shipped with IBM Rational Synergy. Vulnerability Details | Subscribe to My Notifications to be notified of important product support alerts like this. Follow this link for more...

SUSE SLED15 / SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2020:0466-1)

This update for java-180-ibm fixes the following issues : Java 8.0 was updated to Service Refresh 6 Fix Pack 5 bsc1162972, bsc1160968 CVE-2020-2583: Unlink Set of LinkedHashSets CVE-2019-4732: Untrusted DLL search path vulnerability CVE-2020-2593: Normalize normalization for all CVE-2020-2604:...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Enterprise Content Management System Monitor

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7 that is used by IBM Enterprise Content Management System Monitor. These issues were disclosed as part of the IBM Java SDK updates in Jan 2017. Vulnerability Details CVEID: CVE-2016-5546 DESCRIPTION: A...

Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise edition are affected by James Clark Expat Vulnerabilities

Summary IBM Cloud Orchestrator has addressed the following vulnerabilities. Vulnerability Details CVEID: CVE-2013-0340 DESCRIPTION: expat is vulnerable to a denial of service, caused by the improper handling of internal entity expansion. By persuading a victim to open a specially crafted XML...

Security Bulletin: Vulnerability in rsyslog affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3634)

Summary Vulnerability in rsyslog package affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3634. Vulnerability Details CVEID: CVE-2014-3634 DESCRIPTION: RSyslog and sysklogd are vulnerable to a denial of service. By sending a specially-crafted message, a...

Security Bulletin: Vulnerability in GNU C library (glibc) affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2015-0235)

Summary GNU C library glibc vulnerability that has been referred to as GHOST affects SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2015-0235. IBM recommends that you review your entire environment to identify vulnerable releases of the above packages including your...

Security Bulletin: Vulnerabilities in Firefox affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance

Summary Vulnerabilities have been found in Firefox that affect IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-1547, CVE-2014-1555, CVE-2014-1556, CVE-2014-1557. Vulnerability Details CVEID: CVE-2014-1547 DESCRIPTION: Mozilla Firefox and Thunderbird might allo...

Security Bulletin: Vulnerabilities in httpd affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance

Summary Vulnerabilities have been identified for httpd packages in Open Source Apache HTTP Server that affect IBM SmartCloud Provisioning 2.1 for Software Virtual Appliance CVE-2014-0118, CVE-2014-0226, CVE-2014-0231. Vulnerability Details CVE-ID: CVE-2014-0118 DESCRIPTION: The deflateinfilter...

Security Bulletin: Vulnerability in Gnu Transport Layer Security (GnuTLS) affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance (CVE-2014-3466).

Summary Vulnerability in Gnu Transport Layer Security GnuTLS affects IBM SmartCloud Provisioning 2.1 for IBM Provided Software Virtual Appliance CVE-2014-3466. Vulnerability Details CVE ID: CVE-2014-3466 DESCRIPTION: The GnuTLS library provides support for cryptographic algorithms and for protoco...

Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability (CVE-2014-0114) in IBM Web Interface for Content Management (WEBi)

Summary Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader attributes. An attacker could exploit this vulnerability using the class parameter of an ActionForm object to manipulate the ClassLoader and...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM® Development Package for Apache Spark

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8.0 that is used by IBM Development Package for Apache Spark. These issues are disclosed as part of the IBM Java SDK updates in April 2017. IBM Development Package for Apache Spark is providing an IBM Java SD...

IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)

Binary data 9197.prm...

IBM DB2 10.1 < Fix Pack 5 / 10.5 < Fix Pack 6 Multiple Vulnerabilities

Binary data 9199.prm...

IBM DB2 9.8 < Fix Pack 5 Multiple Vulnerabilities

Binary data 9196.prm...

IBM DB2 10.5 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 10.5 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists during the handling of SELECT statements with XML/XSLT function...

IBM DB2 10.1 < Fix Pack 5 Multiple Vulnerabilities (Bar Mitzvah)

According to its version, the installation of IBM DB2 10.1 running on the remote host is prior to Fix Pack 5. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the monitoring or audit facility due to passwords being stored when handling specially crafted...

IBM DB2 10.5 < Fix Pack 5 Multiple DoS Vulnerabilities

According to its version, the IBM DB2 10.5 server running on the remote host is affected by the following vulnerabilities : - A remote, authenticated attacker, using a specially crafted 'ALTER TABLE' statement on an identity column, can cause a denial of service by crashing the server...

IBM DB2 9.8 <= Fix Pack 5 Multiple Vulnerabilities

According to its version, the installation of IBM DB2 running on the remote host is version 9.8 prior or equal to Fix Pack 5. It is, therefore, affected by one or more of the following vulnerabilities : - An unspecified error exists in the GSKit component when initiating SSL/TLS connections due t...

IBM WebSphere Application Server 8.0 < Fix Pack 5 Multiple Vulnerabilities

IBM WebSphere Application Server 8.0 before Fix Pack 5 appears to be running on the remote host. It is, therefore, potentially affected by the following vulnerabilities : - An unspecified error exists related to the Administrative Console that can allow an attacker to hijack sessions...