PT-2018-4585

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application ARA versions 4.9.1 through 5.1.0 Description The issue allows remote authenticated users to conduct clickjacking attacks. Recommendations For versions 4.9.1 through 5.1.0, update to a version that...

CVE-2016-0207: Improper Input Validation

IBM Algorithmics One-Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. IBM X-Force ID: 109399...

Code injection

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

CVE-2017-1154

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

CVE-2017-1154

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

CVE-2017-1154

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

CVE-2017-1154

IBM Algo One - Algo Risk Application (ARA) versions 4.9.1, 5.0, and 5.1.0 contain a vulnerability that could allow a user to access files in the local environment that should not be viewable by application users. The IBM security bulletin for CVE-2017-1154 notes this as a file-access issue and li...

PT-2017-12082

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application versions 4.9.1 through 5.1.0 Description The issue allows a user to gain access to files in the local environment that should not be viewed by application users. Recommendations For versions 4.9.1...

CVE-2017-1154: Exposure of Sensitive Information to an Unauthorized Actor

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

IBM Algorithmics One-Algo Risk Application Unauthorized Access Vulnerability

IBM Algorithmics One-Algo Risk Application is a risk management software solution from IBM USA. An unauthorized access vulnerability exists in IBM Algorithmics One-Algo Risk Application. An attacker could exploit this vulnerability to obtain sensitive information that could lead to further attack...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

Design/Logic Flaw

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application (ARA) versions 4.9.1, 5.0, and 5.1.0 are affected by CVE-2017-1155, which could allow a user to access another user’s reports via a specially crafted HTTP request. Impact: unauthorized access to reports; CVSS v3 base score 4.3 (Network/Low complexity, Pr...

CVE-2017-1155: Exposure of Sensitive Information to an Unauthorized Actor

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

PT-2017-12093

Name of the Vulnerable Software and Affected Versions IBM Algorithmics One-Algo Risk Application versions 4.9.1, 5.0, and 5.1.0 Description The issue allows a user to gain access to another user's reports using a specially crafted HTTP request. Recommendations For version 4.9.1, update to a versi...

CVE-2016-0390

Cross-site scripting XSS vulnerability in IBM Algorithmics Algo One Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Algorithmics Algo One Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0390

IBM Algo One - Algo Risk Application (ARA) versions 4.9.1 through 5.1.0 are affected by CVE-2016-0390, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote attacker could exploit this via a specially crafted URL to execute script in a victim’s ...