CVE-2020-4422

CVE-2020-4422 affects IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium, version 9.2.1. The issue is a memory corruption vulnerability that could allow a remote attacker to execute arbitrary code or cause a crash by convincing a user to open a specially crafted file. Affected produc...

CVE-2020-4343

CVE-2020-4343 affects IBM i2 Analysts Notebook and IBM i2 Analysts Notebook Premium v9.2.1. The IBM bulletin describes memory corruption as the root cause, allowing a remote attacker to execute arbitrary code or cause a crash by convincing a user to open a specially crafted file. Affected product...

CVE-2020-4422

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or...

CVE-2020-4343

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or...

CVE-2020-4287

IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium (9.2.1) are affected by CVE-2020-4287. The issue is a memory corruption in the loading process of .anb files, allowing a remote attacker to execute arbitrary code (with the victim’s privileges) or crash the application when a user op...

CVE-2020-4285

IBM i2 Analyst’s Notebook and IBM i2 Analysts Notebook Premium (version 9.2.1) are affected by CVE-2020-4285, a memory corruption vulnerability tied to loading .anb files. An attacker could exploit this via a specially crafted document to execute arbitrary code with the victim’s privileges or cau...

CVE-2020-4287

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a specially-crafted document, a remote attacker could exploit this vulnerability to execute arbitrary code on the...

CVE-2020-4266

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4266

CVE-2020-4266 affects IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium (version 9.2.1). The vulnerability is a local memory corruption that could allow a locally authenticated user to execute arbitrary code by persuading a victim to open a specially crafted file. The IBM security b...

CVE-2020-4265

IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium (version 9.2.1) are affected by multiple memory corruption vulnerabilities triggered by opening specially-crafted files/.anb documents, allowing a local attacker to execute arbitrary code. IBM cites a fix pack as the mitigation and p...

CVE-2020-4263

Affected software: IBM i2 Analyst's Notebook and IBM i2 Analyst's Notebook Premium 9.2.1. The CVE-2020-4263 entry describes a memory corruption vulnerability that could allow a local attacker to execute arbitrary code by convincing a user to open a specially crafted file. The IBM Security Bulleti...

CVE-2020-4264

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4263

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4262

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4261

The connected IBM bulletin confirms CVE-2020-4261 affects IBM i2 Analyst’s Notebook and IBM i2 Analyst’s Notebook Premium (version 9.2.1). Root cause: memory corruption during loading of .anb files, enabling a local attacker to execute arbitrary code by tricking a user into opening a crafted file...

CVE-2020-4261

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4258

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2020-4257

IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force...

CVE-2019-4062

IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007...

CVE-2019-4062

CVE-2019-4062 affects IBM i2 Intelligent Analyis Platform versions 9.0.0 through 9.1.1, due to an XML External Entity (XXE) vulnerability when processing XML data. A remote attacker could potentially expose sensitive information or exhaust memory resources. The issue is confirmed in multiple sour...