CVE-2014-6133

IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors...

Code injection

IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors...

CVE-2014-6133

IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors...

CVE-2014-6133

CVE-2014-6133 affects IBM API Management 3.x before 3.0.1.0. The vulnerability allows local users to obtain sensitive ciphertext information via unspecified vectors. The connected documents do not specify the root cause, exact vulnerable component, exploit details, or remediation steps in the pro...

PT-2014-7060

Name of the Vulnerable Software and Affected Versions IBM API Management versions prior to 3.0.1.0 Description The issue allows local users to obtain sensitive ciphertext information. Recommendations For versions prior to 3.0.1.0, update to version 3.0.1.0 or later to resolve the issue...

CVE-2014-6133: Undefined Security Weakness

IBM API Management 3.x before 3.0.1.0 allows local users to obtain sensitive ciphertext information via unspecified vectors...

CVE-2014-3036

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors...

CVE-2014-3036

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors...

CVE-2014-3036

The CVE-2014-3036 entry concerns IBM API Management 3.0.0.0. It describes an unspecified vulnerability where, when basic authentication is used for APIs, remote attackers could bypass topology-access restrictions and obtain sensitive information via unknown vectors. The available sources (NVD and...

PT-2014-5035

Name of the Vulnerable Software and Affected Versions IBM API Management version 3.0.0.0 Description The issue allows remote attackers to bypass intended restrictions on topology access and obtain sensitive information when basic authentication is used for APIs. Recommendations For IBM API...

CVE-2014-3036: Undefined Security Weakness

Unspecified vulnerability in IBM API Management 3.0.0.0, when basic authentication is used for APIs, allows remote attackers to bypass intended restrictions on topology access, and obtain sensitive information, via unknown vectors...

CVE-2013-0559

Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors...

Code injection

Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors...

CVE-2013-0559

Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors...

CVE-2013-0559

CVE-2013-0559 is an XSS vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway. A remote attacker could execute scripts in a victim’s browser and potentially access sensitive data. Affected products: IBM Sterling B2B Integrator 5.0–5.2 and IBM Sterling File Gateway 2.0–2.2. Ba...

PT-2013-2426

Name of the Vulnerable Software and Affected Versions IBM API Management version 2.0 Description The issue allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data. The exact vectors used for the attack are not specified. Recommendations For IBM...

CVE-2013-0559: Undefined Security Weakness

Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors...

PT-2013-2952

Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS versions 1.x before 1.21b Description The issue affects the management API in the XML API management service of the Manager component, allowing remote attackers to cause a denial of service via a malformed...

CVE-2013-1184: Improper Input Validation

The management API in the XML API management service in the Manager component in Cisco Unified Computing System UCS 1.x before 1.21b allows remote attackers to cause a denial of service service outage via a malformed request, aka Bug ID CSCtg48206...