Security Bulletin: IBM OpenPages GRC Platform is affected by SQL Injection

Summary IBM OpenPages GRC Platform is affected by SQL Injection Vulnerability Details IBM OpenPages GRC platform has addressed a potential vulnerability related to SQL Injection. CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 7.5 CVSS Temporal Score: See Not Applicable fo...

Security Bulletin: IBM OpenPages GRC Platform may be susceptible to a file upload vulnerability

Summary IBM OpenPages GRC Platform may be susceptible to a file upload vulnerability Vulnerability Details IBM OpenPages GRC platform has addressed a vulnerability related to File upload CVEID: Not Applicable DESCRIPTION: No CVE description. CVSS Base Score: 4.8 CVSS Temporal Score: See Not...

Security Bulletin: IBM OpenPages GRC Platform is affected by Information Disclosure vulnerability

Summary IBM OpenPages GRC Platform has addressed potential vulnerability related to Information Disclosure Vulnerability Details CVEID: CVE-2019-4223 DESCRIPTION: IBM OpenPages GRC Platform can reveal Detailed Error Messages in WebApplication and API CVSS Base Score: 4.3 CVSS Temporal Score: See...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4505)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4268)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4477)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: IBM OpenPages GRC Platform is affected by potential information disclosure vulnerability

Summary IBM OpenPages GRC Platform has addressed a potential vulnerability related to information exposure. Vulnerability Details IBM OpenPages GRC platform has addressed a potential vulnerability related to information exposure, when sensitive information is entered manually into the URL address...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4030)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: IBM OpenPages GRC Platform is affected by CKEditor (Preview Plugin) vulnerability (CVE-2014-5191)

Summary IBM OpenPages GRC Platform has addressed CKEditor Preview Plugin vulnerability CVE-2014-5191 Vulnerability Details CVEID: CVE-2014-5191 DESCRIPTION: Preview Plugin for CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker...

Security Bulletin: IBM OpenPages GRC Platform is affected by Apache POI vulnerability (CVE-2017-12626)

Summary IBM OpenPages GRC Platform has addressed Apache POI vulnerability CVE-2017-12626 Vulnerability Details CVEID: CVE-2017-12626 DESCRIPTION: Apache POI is vulnerable to a denial of service, caused by an error while parsing malicious WMF, EMF, MSG and macros and specially crafted DOC, PPT and...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2018-1794)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2018-1905)

Summary IBM WebSphere Application Server is shipped as a component of OpenPages GRC Platform. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin IBM WebSphere...

Security Bulletin: IBM OpenPages GRC Platform is affected by an Information disclosure vulnerability (CVE-2017-1679)

Summary IBM OpenPages GRC Platform has addressed information disclosure vulnerability CVE-2017-1679 Vulnerability Details CVEID: CVE-2017-1679 DESCRIPTION: IBM OpenPages GRC Platform could allow an attacker to obtain sensitive information from error log files. CVSS Base Score: 6.2 CVSS Temporal...

Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVE-ID: CVE-2018-1323 Description: Apache Tomcat JK ISAPI Connector could allow a remote attacker to obtain sensitive information, caused by the...

Security Bulletin: IBM OpenPages GRC Platform has addressed insecure object reference (CVE-2017-1148)

Summary IBM OpenPages GRC Platform with OpenPages Loss Event Entry LEE application addressed potential security exposure due to insecure object reference. Vulnerability Details CVEID: CVE-2017-1148 DESCRIPTION: IBM OpenPages GRC Platform with OpenPages Loss Event Entry LEE application could allow...

Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache Tomcat vulnerabilities.

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple vulnerabilities in Apache Tomcat. Vulnerability Details CVEID: CVE-2017-6056 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by a programming error in the servlet and JSP engine. A...

Security Bulletin: IBM OpenPages GRC Platform Web Applications are NOT vulnerable to (CVE-2017-9805 , CVE-2017-9804, CVE-2017-9793)

Summary IBM OpenPages GRC Platform Web Applications are NOT vulnerable to Apache Struts 2 vulnerabilities CVE-2017-9805 , CVE-2017-9804 and CVE-2017-9793 Vulnerability Details For more information on Struts 2 vulnerabilities, please consult Apache Security Bulletins CVE-2017-9805 , CVE-2017-9804...

Security Bulletin: IBM OpenPages GRC Platform Web Applications are not vulnerable to (CVE-2017-5638)

Summary IBM OpenPages GRC Platform Web Applications are not vulnerable to the Apache Struts 2 vulnerability CVE-2017-5638 Vulnerability Details IBM OpenPages GRC Platform Web Applications are NOT vulnerable to the Apache Struts 2 vulnerability CVE-2017-5638. Please refer to...

Security Bulletin: IBM OpenPages GRC Platform Information disclosure (CVE-2016-3050)

Summary IBM OpenPages GRC Platform has a potential security exposure due to an Information disclosure vulnerability. Vulnerability Details CVEID: CVE-2016-3050 DESCRIPTION: IBM OpenPages GRC Platform could disclose sensitive information to an authenticated user through error logs. CVSS Base Score...

Security Bulletin: A security vulnerability has been identified in IBM Cognos shipped with IBM OpenPages GRC Platform (CVE-2016-0234)

Summary IBM OpenPages GRC Platform has a potential security exposure, due to an issue found in bundled IBM Cognos Business Intelligence. Vulnerability Details CVEID: CVE-2016-0234 DESCRIPTION: IBM OpenPages GRC Platform could allow a local user to obtain sensitive information when a previous user...