EUVD-2015-0179

Malware in sbrugna...

EUVD-2014-3032

Malware in sbrugna...

Security Bulletin: Multiple security vulnerabilities affect IBM WebSphere Application Server Liberty shipped with IBM OpenPages

Summary IBM WebSphere Application Server Liberty is shipped as a supporting program of IBM OpenPages. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty has been published in multiple security bulletins. These products have addressed the applicable CVEs...

CVE-2020-4536: Generation of Error Message Containing Sensitive Information

IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907...

PT-2021-12127

Name of the Vulnerable Software and Affected Versions: IBM OpenPages GRC Platform version 8.1 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session. This ...

CVE-2020-4535: Improper Neutralization of Input During Web Page Generation

IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906...

PT-2021-12128

Name of the Vulnerable Software and Affected Versions: IBM OpenPages GRC Platform version 8.1 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against the...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM OpenPages with Watson (CVE-2020-4464)

Summary IBM WebSphere Application Server is shipped as a component of IBM OpenPages with Watson. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Security Bulletin: IBM OpenPages GRC Platform is affected by Reflected Cross-Site Scripting

Summary IBM OpenPages GRC Platform is affected by Reflected Cross-Site Scripting Vulnerability Details IBM OpenPages GRC platform has addressed a potential vulnerability related to Reflected Cross-Site Scripting. CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 5.4 CVSS...

Security Bulletin: IBM OpenPages GRC Platform is affected by Stored Cross-site scripting

Summary IBM OpenPages GRC Platform is affected by Stored Cross-site scripting Vulnerability Details IBM OpenPages GRC platform has addressed a potential vulnerability related to Stored Cross-Site scripting. CVEID: CVE-2019-4578 DESCRIPTION: IBM OpenPages GRC Platform is vulnerable to cross-site...

Security Bulletin: IBM OpenPages GRC Platform is affected by SQL Injection

Summary IBM OpenPages GRC Platform is affected by SQL Injection Vulnerability Details IBM OpenPages GRC platform has addressed a potential vulnerability related to SQL Injection. CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 7.5 CVSS Temporal Score: See Not Applicable fo...

Security Bulletin: IBM OpenPages GRC Platform is affected by Information Disclosure vulnerability

Summary IBM OpenPages GRC Platform has addressed potential vulnerability related to Information Disclosure Vulnerability Details CVEID: CVE-2019-4223 DESCRIPTION: IBM OpenPages GRC Platform can reveal Detailed Error Messages in WebApplication and API CVSS Base Score: 4.3 CVSS Temporal Score: See...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4268)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2018-1794)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2018-1905)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

CVE-2017-1679: Exposure of Sensitive Information to an Unauthorized Actor

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files. IBM X-Force ID: 134001...

PT-2018-6338

Name of the Vulnerable Software and Affected Versions: IBM OpenPages GRC Platform versions 7.2 through 8.0 Description: The issue allows an attacker to obtain sensitive information from error log files. Recommendations: For IBM OpenPages GRC Platform versions 7.2 through 8.0, consider restricting...

PT-2018-4589

Name of the Vulnerable Software and Affected Versions IBM OpenPages GRC Platform versions 7.1 through 7.3 Description The issue allows a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. Recommendations For versions...

CVE-2016-0234: Insufficient Session Expiration

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser. IBM X-Force ID: 110303...

Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVE-ID: CVE-2018-1323 Description: Apache Tomcat JK ISAPI Connector could allow a remote attacker to obtain sensitive information, caused by the...