Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects the IBM Performance Management product (CVE-2017-1681)

Summary IBM WebSphere Application Server could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could allow unauthorized access to read a file. Vulnerability Details CVEID: CVE-2017-1681 DESCRIPTION: IBM WebSphere Application Serve...

Security Bulletin: IBM HTTP Server Response Time module is affected by JavaScript injection vulnerability.

Summary IBM HTTP Server Response Time module, which is delivered as part of IBM Performance Management, has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2018-1441 DESCRIPTION: IBM Application Performance Management - Response Time Monitoring Agent is vulnerable to...

Security Bulletin: A vulnerability in IBM WebSphere Application Server Liberty affects the IBM Performance Management product (CVE-2017-1194).

Summary IBM WebSphere Application Server is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. Vulnerability Details CVEID: CVE-2017-1194 DESCRIPTION: IBM WebSphere Application Serve...

Security Bulletin: A vulnerability in the SQLite component of the Response Time agent affects IBM Performance Management products (CVE-2016-6153)

Summary SQLite could allow a local attacker to gain elevated privileges on the system, caused by the creation of temporary files in directory with insecure permissions. An attacker could exploit this vulnerability to obtain leaked data. Vulnerability Details CVEID: CVE-2016-6153 DESCRIPTION: SQLi...

Security Bulletin: A vulnerability in the GSKIT component of the Core Framework affects IBM Performance Management products (CVE-2016-2183)

Summary OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of the SSL/TLS protocol. By capturing large amounts of encrypted traffic between the SSL/TLS server and the client, a remote attacker able to conduct a...

Security Bulletin: A vulnerability in the Apache Xerces-C XML Parser library affects IBM Performance Management products (CVE-2016-4463)

Summary The Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing a deeply nested DTD. A remote attacker could exploit this vulnerability to cause a denial of service. Vulnerability Details CVEID: CVE-2016-4463 DESCRIPTION:...

Security Bulletin: vulnerabilities in IBM WebSphere Application Server Liberty affects IBM Performance Management products

Summary The vulnerabilities could allow a remote attacker to conduct phishing attacks or obtain sensitive information, or allow cross-site scripting in OpenID Connect clients. Vulnerability Details CVEID: CVE-2016-3040 DESCRIPTION: IBM WebSphere Application Server Liberty could allow a remote...

Security Bulletin: A vulnerability in Apache Xerces-C XML Parser library affects IBM Performance Management products (CVE-2016-0729 )

Summary Apache Xerces-C XML Parser library is vulnerable to a denial of service, caused by improper bounds checking during processing and error reporting. By sending specially crafted input documents, an attacker could exploit this vulnerability to cause the library to crash or possibly execute...

IBM Application Performance Management-Response Time Monitoring Agent Cross-Site Scripting Vulnerability

IBM Application Performance Management-Response Time Monitoring Agent is a program response time monitoring agent for application performance management from IBM USA. A cross-site scripting vulnerability exists in IBM Application Performance Management-Response Time Monitoring Agent. A remote...

CVE-2018-1441

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

PT-2018-12496

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management - Response Time Monitoring Agent versions 8.1.3 through 8.1.4 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leadi...

CVE-2018-1441: Improper Neutralization of Input During Web Page Generation

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.3 and 8.1.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credential...

IBM Application Performance Management-Response Time Monitoring Agent Cross-Site Request Forgery Vulnerability

IBM Application Performance Management-Response Time Monitoring Agent is a program response time monitoring agent for application performance management from IBM USA. A cross-site request forgery vulnerability exists in IBM Application Performance Management-Response Time Monitoring Agent. A remo...

CVE-2018-1387

IBM Application Performance Management for Monitoring & Diagnostics IBM Monitoring 8.1.3 and 8.1.4 may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210...

CVE-2018-1387: Exposure of Sensitive Information to an Unauthorized Actor

IBM Application Performance Management for Monitoring & Diagnostics IBM Monitoring 8.1.3 and 8.1.4 may release sensitive personal data to the staff who can access to the database of this product. IBM X-Force ID: 138210...

PT-2018-12237

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management for Monitoring & Diagnostics versions 8.1.3 through 8.1.4 Description The issue may result in the release of sensitive personal data to staff who have access to the product's database. Recommendations For...

CVE-2018-1442: Cross-Site Request Forgery (CSRF)

IBM Application Performance Management - Response Time Monitoring Agent IBM Monitoring 8.1.4 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 139598...

PT-2018-12501

Name of the Vulnerable Software and Affected Versions IBM Application Performance Management - Response Time Monitoring Agent version 8.1.4 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to a cross-site...

CVE-2017-0301

In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portal access requests do not return the intended resources in some cases. This may allow access to internal BIG-IP APM resources, however the application...

The vulnerability in the web service of the software for IT service management and intelligent monitoring, IBM Application Performance Management, allows a attacker to execute arbitrary code.

The vulnerability in the web service of the software for managing IT services and intelligent monitoring of IBM Application Performance Management APM is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...