Security Bulletin: Vulnerability in RC4 stream cipher affects IBM FileNet Content Manager, IBM FileNet BPM and IBM Content Foundation products (CVE-2015-2808)

Summary The RC4 “Bar Mitzvah” Attack affects products that use the SSL/TLS protocol as a means for secure communication. The IBM FileNet Content Manager, IBM FileNet BPM and IBM Content Foundation products can be configured to use the SSL/TLS protocol and are thus potentially affected by this...

Security Bulletin: One vulnerability in IBM FileNet Content Manager, IBM Content Foundation, IBM FileNet Content Federation Services and IBM FileNet Legacy Content Search Engine (CVE-2014-0114)

Summary A security vulnerability exists in IBM FileNet Content Manager, IBM Content Foundation, IBM FileNet Content Federation Services and IBM FileNet Legacy Content Search Engine. See the individual descriptions for the details. Vulnerability Details CVEID: CVE-2014-0114 CVE-2014-0114...

Security Bulletin: Vulnerability in SSLv3 affects FileNet Content Manager, FileNet BPM and IBM Content Foundation (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is a configurable option in FileNet Content Manager and FileNet BPM products. If using SSLv3 with these products, please refer to the sections below to...

Security Bulletin: IBM Content Foundation on Cloud security vulnerability in WebSphere container

Summary There is a denial of service and Networking security vulnerabilities in WebSphere Application Server. Vulnerability Details CVEID: CVE-2019-4720 DESCRIPTION: IBM WebSphere Application Server is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote...

CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

CVE-2021-33760

Media Foundation Information Disclosure Vulnerability...

CVE-2021-33760

Media Foundation Information Disclosure Vulnerability...

Remote code execution

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

Information disclosure

Media Foundation Information Disclosure Vulnerability...

CVE-2021-33760

Media Foundation Information Disclosure Vulnerability...

CVE-2021-34503

Microsoft Windows Media Foundation Remote Code Execution Vulnerability...

CVE-2021-34503

CVE-2021-34503 is a Windows Media Foundation remote code execution vulnerability described in multiple sources as an issue in the Media Foundation component of Microsoft Windows that can lead to remote code execution. Connected documents corroborate that the vulnerability affects Windows Media Fo...

CVE-2021-34503 Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

CVE-2021-33760

Technical details for CVE-2021-33760 are not publicly provided in the supplied connected documents. The materials mention a Media Foundation information disclosure vulnerability but contain no product/version/exploit specifics. Monitor for updates.

CVE-2021-33760 Media Foundation Information Disclosure Vulnerability

...

CVE-2021-33760 Media Foundation Information Disclosure Vulnerability

...

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

...

Media Foundation Information Disclosure Vulnerability

...

Description of the security update for SharePoint Foundation 2013: July 13, 2021 (KB5001996)

Description of the security update for SharePoint Foundation 2013: July 13, 2021 KB5001996 Summary This security update resolves a Microsoft SharePoint Server information disclosure vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...