CVE-2020-4666: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

IBM Engineering Requirements Quality Assistant 输入验证错误漏洞

IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. An information disclosure vulnerability exists in IBM Engineering Requirements Quality Assistant. The vulnerability stems from improper input validation. An attacker could...

CVE-2020-4667: Improper Input Validation

IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper input validation. IBM X-Force ID: 186282...

CVE-2020-4663: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

PT-2021-12150

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

Hotfix XS81E014 - For Citrix Hypervisor 8.1

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.1. All customers who are affected by the issues described inCTX286756 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Note: This hotfix is available only to customers on theCustomer...

PT-2021-12149

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

PT-2021-12151

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Quality Assistant On-Premises affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to...

CVE-2020-4664: Improper Neutralization of Input During Web Page Generation

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Security Bulletin: Multiple vulnerabilites affect IBM Jazz Foundation and IBM Engineering products.

Summary There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management ELM, IBM Engineering Requirements Management DOORS Next DOORS Next, IBM Engineering Lifecycle Optimization - Engineeri...

Security Bulletin: Multiple vulnerabilities affect IBM Engineering Requirements Quality Assistant On-Premises

Summary There are multiple vulnerabilites that affect IBM Engineering Requirements Quality Assistant On-Premises including the IBM SDK, Java Technology Edition Quarterly CPU from Oct 2019, Jan 2020 and Apr 2020 plus CVE-2020-2654 deferred from Oracle Jan 2020 CPU and CVE-2019-2949 deferred from...

CVE-2020-4666

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

CVE-2020-4663

IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...

Privacy breaches: Using Microsoft 365 Advanced Audit and Advanced eDiscovery to minimize impact

GDPR, HIPAA, GLBA, all 50 U.S. States, and many countries have privacy breach reporting requirements. If an organization experiences a breach of customer or employee personal information, they must report it within the required time frame. The size and scope of this reporting effort can be massiv...

iThemes Security < 7.7.0 - New-Password Requirements Not Enforced Until second Login

The plugin did not enforce new-password requirements for existing accounts until the second login occurred, which could leave an account configured with a potentially weak password until the user changes it...

CVE-2020-25153: Weak Password Requirements

The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords...

openssl security and bug fix update

1.1.1g-12 - Fix CVE-2020-1971 ediparty null pointer dereference 1.1.1g-11.1 - Implemented new FIPS requirements in regards to KDF and DH selftests - Disallow certificates with explicit EC parameters...

CVE-2020-26201: Weak Password Requirements

Askey AP5100WDualSIG1.01.097 and all prior versions use a weak password at the Operating System rlx-linux level. This allows an attacker to gain unauthorized access as an admin or root user to the device Operating System via Telnet or SSH...

File-sharing and cloud storage sites: How safe are they?

There it is again—that annoying message that pops up when your email client informs you that a file is too big to attach. Those of us that are confronted with this problem on a regular basis—and those of us that want to attach files that could get picked up by anti-malware scanners along the...

VMware Carbon Black Cloud Adds Device Control

With most organizations now working remotely, the chances your employees may unintentionally use restricted devices and infect your network has grown exponentially. With this threat in mind, we’re happy to announce the release today of device control in the VMware Carbon Black Cloud. Although the...