Security Bulletin: IBM OpenPages GRC Platform has addressed multiple Apache POI vulnerabilities (CVE-2017-5644, CVE-2016-5000, CVE-2014-3574)

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple vulnerabilities in Apache POI library. Vulnerability Details CVE-ID: CVE-2017-5644 Description: Apache POI is vulnerable to a denial of service, cause by an XML External Entity Injection XXE error when...

Security Bulletin: IBM OpenPages GRC Platform is affected by multiple XSS reflection vulnerabilities (CVE-2017-1147, CVE-2016-3048)

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple XSS reflection vulnerabilities. Vulnerability Details CVEID: CVE-2017-1147 DESCRIPTION: IBM OpenPages GRC Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: Potential vulnerability in IBM OpenPages GRC Platform due to vulnerability in Flexera InstallAnywhere based installation (CVE-2016-2542)

Summary The following potential security vulnerability has been identified in versions of IBM OpenPages GRC Platform that use a Flexera InstallAnywhere based installer. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Database

Summary These potential security vulnerabilities exist in all versions of IBM OpenPages GRC Platform with Database: See Vulnerability Details for CVE IDs. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Database are potentially impacted by these vulnerabilities. CVEID:...

Security Bulletin: IBM OpenPages Platform with Database vulnerabilities.

Summary These security vulnerabilities exist in all versions of IBM OpenPages with Database: See Vulnerability Details for CVE IDs. Vulnerability Details Customers who have IBM OpenPages with Database are potentially impacted by these vulnerabilities. CVE-ID: CVE-2013-3751 Description: An...

Security Bulletin: IBM OpenPages Platform with Database is affected by multiple vulnerabilities

Summary Security vulnerabilities exist in all versions of IBM OpenPages with Database. These vulnerabilities were reported in 01/20/2015 X-Force Report . Vulnerability Details CVEID: CVE-2014-6514 DESCRIPTION: An unspecified vulnerability in Oracle Database related to the PL/SQL component could...

Security Bulletin: Blind SQL injection vulnerability in IBM OpenPages GRC Platform API (CVE-2015-5049)

Summary A blind SQL injection vulnerability has been found in the OpenPages GRC Platform API that could allow retrival or manipulation of information in the database. Vulnerability Details CVEID: CVE-2015-5049 DESCRIPTION: IBM OpenPages GRC Platform is vulnerable to SQL injection. A remote attack...

Security Bulletin: Multiple potential vulnerabilites in IBM OpenPages GRC Platform

Summary The following security vulnerabilities have been identified in versions of IBM OpenPagesGRC Platform. See Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC platform are potentially impacted by the following vulnerabilities: CVEI...

Security Bulletin: Multiple vulnerabilities in IBM OpenPages Platform with Application Server

Summary The following security vulnerabilities have been identified in versions of IBM OpenPages with Application Server. See Vulnerability Details for CVE IDs. Vulnerability Details Customers who have IBM OpenPages with Application Server are potentially impacted by the following vulnerabilities...

Security Bulletin: IBM OpenPages Platform with Application Server vulnerabilities.

Summary The following security vulnerability exists in all versions of IBM OpenPages with Application Server: See Vulnerability Details for CVE ID. Vulnerability Details DESCRIPTION: Customers who have IBM OpenPages with Application Server are potentially impacted by the following vulnerability...

Security Bulletin: IBM OpenPages GRC Platform Apache Struts V1 ClassLoader vulnerability(CVE-2014-0114)

Summary IBM OpenPages GRC Platform has a potential security exposure due to a vulnerability in Apache Struts version 1. Vulnerability Details Apache Struts could allow a remote attacker to execute arbitrary code on the system, caused by the failure to restrict the setting of Class Loader...

IBM OpenPages GRC Platform Cross-Site Scripting Vulnerability (CNVD-2017-34427)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

IBM OpenPages GRC Platform Cross-Site Request Forgery Vulnerability (CNVD-2017-34431)

IBM OpenPages GRC Platform is a suite of platforms for managing enterprise risk and compliance from IBM in the United States. The platform provides a set of core services and functional components that cover the risk and compliance domain including operational risk, policy and compliance, financi...

Cross site scripting

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

Cross site scripting

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

CVE-2017-1300

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 125162...

CVE-2017-1333

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system. IBM X-Force ID: 126241...

IBM OpenPages GRC Platform HTML Injection Vulnerability

IBM OpenPages GRC Platform is a suite of governance, risk and compliance platforms for managing enterprise risk and compliance challenges from IBM in the United States. The platform provides a set of core services and functional components across the risk and compliance domains, including...