CVE-2018-5528

CVE-2018-5528 affects F5 BIG-IP TMM when processing BIG-IP APM data, potentially causing TMM restart and core file creation leading to a DoS. Vulnerable: BIG-IP APM/TMM on BIG-IP versions 13.0.1 and 13.1.0.4–13.1.0.7. Impact: temporary traffic processing disruption and device group failover durin...

CVE-2018-5528

Under certain conditions, TMM may restart and produce a core file while processing APM data on BIG-IP 13.0.1 or 13.1.0.4-13.1.0.7...

Security Bulletin: Monitoring Agent for WebSphere Applications is affected by a potential for sensitive personal information to be visible when you use the diagnostics or transaction tracking capability of the agent

Summary Monitoring Agent for WebSphere Applications WebSphere Applications agent for short, which is delivered in the Cloud APM product, has addressed the following vulnerability: -- The privacy filter used by the WebSphere Applications agent does not shield PCI data when the diagnostics or...

Security Bulletin: A vulnerability in the Firefox component of the Synthetic Playback agent affects IBM Performance Management products.

Summary Multiple browsers could allow a remote attacker to obtain sensitive information, caused by the failure to consider the role of the TCP congestion window in providing information about content length by the HTTPS protocol or by the HTTP/2 protocol. By visiting a Web site owned by a malicio...

How You Get There Matters: "Middle-Mile" RUM to Drive CDN Strategy

Traditional RUM products make use of APIs Navigation-Timing, Resource-Timing, etc. built into browsers to help measure the performance characteristics of the loading of a web page. That is, they do their best to quantify the work required by the browser when rendering a web page. APM products use...

CVE-2018-1441

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

Cross site scripting

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

CVE-2018-1441

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

CVE-2018-1441

The CVE-2018-1441 entry concerns IBM Application Performance Management – Response Time Monitoring Agent used with IBM Monitoring 8.1.3 and 8.1.4. Vulnerability type: cross-site scripting in the Web UI that can lead to credentials disclosure within a trusted session. Affected products/versions in...

CVE-2018-1442

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139598...

CVE-2018-1387

CVE-2018-1387 affects IBM Cloud APM Monitoring Agent for WebSphere Applications (WebSphere Applications agent) in IBM Cloud APM 8.1.3, 8.1.4 and related components. Root cause: the privacy filter did not shield PCI/data when diagnostics or transaction tracking is enabled, potentially exposing sen...

CVE-2018-1387

IBM Application Performance Management for Monitoring & Diagnostics IBM Monitoring 8.1.3 and 8.1.4 may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

Information disclosure

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

CVE-2014-3972

Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers to read arbitrary files via unspecified vectors...

Directory traversal

Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2017-17101

The CVE-2017-17101 issue affects Apexis APM-H803-MPC software used on various IP cameras. A web application CGI entry point is unprotected, allowing an unauthenticated user to bypass login and access webcam contents, including live video streams, configuration files with passwords, and system inf...

CVE-2017-17101

An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotected CGI method inside the web application permits an unauthenticated user to bypass the login screen and access the webcam contents including: live video stream, configuration file...

CVE-2014-3972

CVE-2014-3972 affects Apexis APM-J601-WS cameras with firmware before 17.35.2.49. The issue is a directory traversal vulnerability that allows remote attackers to read arbitrary files via unspecified vectors, impacting confidentiality. Publicly disclosed references show the condition and affected...