Oracle Business Intelligence Publisher Multiple Vulnerabilities (April 2016 CPU)

The version of Oracle Business Intelligence Publisher running on the remote host is 11.1.1.7.x prior to 11.1.1.7.160119, 11.1.1.9.x prior to 11.1.1.9.160119, or 12.2.1.0.x prior to 12.2.1.0.160419. It is, therefore, affected by multiple vulnerabilities as noted in the April 2016 Critical Patch...

Attack Analytics Now Include Actionable Insights

The number and sophistication of attacks on enterprise networks, applications, and APIs has increased as intruders gain technical acumen and advanced tool kits. Many attackers are now able to maintain and sustain determined efforts to steal data and disrupt business. With such a high number of...

Avast Network Breached As Hackers Target CCleaner Again

Czech antivirus vendor Avast on Monday warned that hackers were able to access its internal network using a temporary VPN account. Avast said that it believes that the intrusion, first detected on Sept. 25, was likely targeting its CCleaner business in a supply chain attack. CCleaner, which is...

Security Bulletin: Vulnerabilities in Intel CPUs affect IBM Integrated Analytics System

Summary Potential security vulnerabilities in CPUs may allow information disclosure. Intel released Microcode Updates MCU updates to mitigate this potential vulnerability. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-11091 DESCRIPTION:...

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System

Summary Open Source OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-5407 DESCRIPTION: Multiple SMT/Hyper-Threading architectures and processors could allow a local attacker to obtain...

Security Bulletin: Any user can erase all storage in IBM Integrated Analytics System

Summary IBM Integrated Analytics System uses default passwords that can be found in the official publicly available documentation on the web for switches and flash storage. Vulnerability Details IBM Integrated Analytics System uses default passwords that can be found in the official publicly...

Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System

Summary Open Source BIND is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-5743 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by a flaw when setting the TCP client quota using th...

Security Bulletin: IBM® InfoSphere Balanced Warehouse, IBM Smart Analytics System and IBM PureData System for Operational Analytics are affected by an IBM DB2® LUW denial of service vulnerability in ALTER MODULE statement handling (CVE-2014-3094)

Summary The IBM InfoSphere Balanced Warehouse C3000, C4000, D5100, IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700, 7710 and IBM PureData System for Operational Analytics ship with either IBM DB2 Version 9.7 or Version 10.1. IBM DB2 is vulnerable to a stack buffer overflow, caused b...

Security Bulletin: A security vulnerability has been identified in IBM® General Parallel File System shipped with IBM PureData System for Operational Analytics (CVE-2015-1890)

Summary IBM General Parallel File System is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System has been published in a security bulletin. Vulnerability Details CVEID: CVE-2015-1890...

Security Bulletin: A security vulnerability has been identified in IBM® GPFS shipped with IBM PureData System for Operational Analytics (CVE-2015-4974, CVE-2015-4981)

Summary IBM GPFS is shipped as a component of IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM GPFS has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: IBM Spectrum Scale an...

Security Bulletin: A security vulnerability has been identified in IBM® WebSphere Application Server shipped with IBM InfoSphere Balanced Warehouse, IBM Smart Analytics System, IBM PureData System for Operational Analytics (CVE-2015-4938)

Summary IBM WebSphere Applicatoin Server is shipped as a component of IBM InfoSphere Balanced Warehouse, IBM Smart Analytics System and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a...

Security Bulletin: IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700, 7710 and IBM PureData System for Operational Analytics are affected by an IBM DB2 ALTER TABLE vulnerability (CVE-2014-6159)

Summary The IBM InfoSphere Balanced Warehouse C3000, C4000, IBM Smart Analytics System 1050, 2050, 5600, 5710, 7600, 7700, 7710 and IBM PureData System for Operational Analytics ship with either IBM DB2 Version 9.7 or Version 10.1. IBM DB2 contains a vulnerability in which an ALTER TABLE statemen...

Security Bulletin: IBM PureData System for Operational Analytics V1.0 (A1791) is affected by vulnerabilities in GSKit (CVE-2015-0138, CVE-2015-0159 and CVE-2014-6221)

Summary The IBM PureData System for Operational Analytics V1.0 A1791 ships with IBM DB2 10.1. GSKit is an IBM component that is used by IBM DB2. The GSKit that is shipped with IBM DB2 contains multiple security vulnerabilities including the “FREAK: Factoring Attack on RSA-EXPORT keys" TLS/SSL...

Security Bulletin: Vulnerabilities in Bash affect IBM PureData System for Operational Analytics (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and two memory corruption vulnerabilities. Bash is used by the IBM PureData System for Operational Analytics. Vulnerability Detai...

Security Bulletin: IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in OpenSSL

Summary The IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in OpenSSL. Vulnerability Details CVEID: CVE-2014-3511 DESCRIPTION: OpenSSL could allow a remote attacker to bypass security restrictions, caused by the negotiation of TLS 1.0 instead of higher...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® General Parallel File System shipped with IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics

Summary IBM General Parallel File System is shipped as a component of IBM Smart Analytics System 7600, 7700, 7710 and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System has been published in a security bulletin...

Security Bulletin: A security vulnerability has been identified in IBM® General Parallel File System and IBM Spectrum Scale shipped with IBM Smart Analytics System and IBM PureData System for Operational Analytics (CVE-2016-0263)

Summary IBM General Parallel File System or IBM Spectrum Scale is shipped as a component of IBM Smart Analytics System and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM General Parallel File System and IBM Spectrum Scale has been published...

Security Bulletin: IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in SSLv3 and OpenSSL

Summary The IBM PureData System for Operational Analytics is affected by multiple vulnerabilities in SSLv3 and OpenSSL. Vulnerability Details CVEID: CVE-2014-3566 DESCRIPTION: Multiple products could allow a remote attacker to obtain sensitive information, caused by a design error when using the...

Security Bulletin: TLS padding vulnerability affects IBM PureData System for Operational Analytics (CVE-2014-8730)

Summary Transport Layer Security TLS padding vulnerability via a POODLE Padding Oracle On Downgraded Legacy Encryption like attack affects IBM PureData System for Operational Analytics. Vulnerability Details CVE-ID: CVE-2014-8730 DESCRIPTION: Product could allow a remote attacker to obtain...

Security Bulletin: A security vulnerability has been identified in IBM® DB2® shipped with IBM Smart Analytics System and IBM PureData System for Operational Analytics (CVE-2016-0201, CVE-2015-7420, CVE-2015-7421)

Summary IBM® DB2® is shipped as a component of IBM Smart Analytics System and IBM PureData System for Operational Analytics. Information about a security vulnerability affecting IBM DB2 has been published in a security bulletin. Vulnerability Details Consult the security bulletin Security Bulleti...