CVE-2020-4332

CVE-2020-4332 affects IBM WebSphere eXtreme Scale Liberty Deployment (XSLD). The connected IBM bulletin confirms a remote information disclosure vulnerability in WebSphere eXtreme Scale Liberty Deployment, where a specially crafted HTTP request can let an attacker access highly sensitive data. Af...

CVE-2019-4714

IBM InfoSphere Information Server family is affected by CVE-2019-4714, a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI and could lead to credentials disclosure within a trusted session. Affected products/versions include InfoSphere Information Server ...

CVE-2021-29789

CVE-2021-29789 affects IBM BMCs shipped with 8335-GTC/GTG/GTW OP910 and 8335-GTH/GTX OP920/OP930/OP940. The issue involves an incorrect configuration setting that could lead to denial of service or unintended firmware on the device. IBM’s bulletin highlights remediation via Workarounds and Mitiga...

CVE-2018-1400

CVE-2018-1400 is an IBM vulnerability: cross-site scripting in IBM Rational Software Architect Design Manager (RSA DM) / Rational Rhapsody Design Manager (RDM) Web UI. The issue allows embedding arbitrary JavaScript in configuration names, potentially leading to credential disclosure within a tru...

CVE-2019-4501

CVE-2019-4501 affects the MaaS360 Android App (versions 6.60 and earlier) in Android Enterprise Managed Work Profile Mode with WebView-based SSO login flows. The issue is an anomaly in Native Application SSO for SaaS apps using WebView that can subvert Android Enterprise security controls. It doe...

CVE-2018-1960

The MaaS360 iOS Application (versions

CVE-2017-1259

CVE-2017-1259 affects IBM Security Guardium. The IBM bulletin confirms that Guardium transmits user credentials in clear text, enabling potential reading via man-in-the-middle. Affected products/versions include Guardium 10.0, 10.0.1, 10.1, 10.1.2, and 10.1.3. Root cause is insecure credential tr...

CVE-2019-4629

IBM’s bulletin confirms CVE-2019-4629 as affecting IBM DOORS Next Generation (DNG/RRC) with a cross-site scripting vulnerability in the web UI. Affected products/versions include Rational CLM 6.0 through 6.0.6.1, Rational Quality Manager 6.0–6.0.6.1, Rational Team Concert 6.0–6.0.6.1, Rational DO...

CVE-2019-4604

IBM DOORS Next Generation (DNG/RRC) is affected by CVE-2019-4604, an XML External Entity (XXE) vulnerability in XML data processing. The issue could allow a remote attacker to expose sensitive information or cause memory resource consumption. Affected products/versions include Rational CLM 6.0 th...

CVE-2017-1472

The IBM Security Identity Governance Virtual Appliance is listed in the connected bulletin as vulnerable to CVE-2017-1472 (XML External Entity Injection when processing XML data). The vulnerability affects IBM IGI releases in the 5.2 family (5.2, 5.2.1, 5.2.2, 5.2.2.1, 5.2.3, 5.2.3.1, 5.2.3.2) an...

CVE-2019-4634

CVE-2019-4634 affects IBM Security Secret Server (all versions). The IBM security bulletin and Symantec writeup describe information-disclosure vulnerabilities where an attacker could learn details about underlying technologies through headers and response data (e.g., X-Powered-By, X-ASPNET-VERSI...

CVE-2020-4844

CVE-2020-4844 is addressed in IBM Security Identity Governance and Intelligence (IGI) 5.2.6. The IBM Security Directory Integrator component used by IGI had hard coded credentials, which has been removed in the fix. Affected product: IBM Security Identity Governance and Intelligence, version 5.2....

CVE-2019-4168

CVE-2019-4168 Details (IBM UrbanCode Deploy) : IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. Affected products/versions: all fixpacks of IBM UrbanCode Deploy 7.0–7.0.2.2 and IBM UrbanCode Deploy 6.2...

CVE-2020-4225

IBM Application Gateway (version 1.0) is affected by CVE-2020-4225 where the product does not properly validate tenant configuration, potentially allowing a local user to obtain highly sensitive information or perform unauthorized actions. Remediation guidance in the linked IBM Security Bulletin ...

CVE-2019-4490

CVE-2019-4490 concerns IBM UrbanCode Deploy (UCD). A security vulnerability allows maliciously crafted data in UCD to generate a malicious CSV download file when opened with certain third‑party tools. IBM’s bulletin notes affected products as UCD (all versions) with CVSS base score 7.8, and lists...

CVE-2018-1591

IBM Multi-Cloud Data Encryption (MDE) is affected by CVE-2018-1591 due to an application error that causes error messages to disclose sensitive information about the environment, users, or data. Affected versions are MDE 2.1 through 2.1.0.1. The remediation is to upgrade to MDE 2.1.0.2 (Multiplat...

CVE-2020-4538

CVE-2020-4538 affects IBM Security Identity Manager (ISIM) 6.0.0. The vulnerability arises from reuse of another user’s JSESSIONID, enabling a privileged local user to perform unauthorized actions. IBM's bulletin confirms the issue and assigns a CVSS Base score of 6.7. Remediation provided: upgra...

CVE-2019-4498

CVE-2019-4498 affects IBM Secure Gateway Client versions 1.8.0.0–1.8.2.2. The vulnerability arises from weaker-than-expected cryptographic algorithms used by the Secure Gateway Service, which could allow decryption of highly sensitive information. Remediation: upgrade to Secure Gateway Client 1.8...

CVE-2019-4499

CVE-2019-4499 affects IBM Secure Gateway Client (versions 1.8.0.0–1.8.2.2). The vulnerability arises from hard-coded credentials used for inbound authentication or internal data encryption. IBM’s bulletin lists remediation by upgrading to Secure Gateway Client 1.8.3.0 (fixed version). No other ex...

CVE-2019-4677

IBM Security Identity Manager is affected by CVE-2019-4677 due to a cross-site scripting vulnerability in the Web UI. The bulletin specifies IBM Security Identity Manager 6.0.0 as affected, with the fix available in version 6.0.0-ISS-SIM-FP0023. The vulnerability allows embedding arbitrary JavaSc...