Security Bulletin: IBM InfoSphere Balanced Warehouse C3000 and C4000, IBM Smart Analytics System 1050, 2050, and 5710 systems are affected by privilege escalation vulnerability in IBM DB2 for Linux, Unix, and Windows Audit Facility (CVE-2013-3475)

Abstract IBM InfoSphere Balanced Warehouse C3000 and C4000 and IBM Smart Analytics System 1050, 2050, and 5710 systems are shipped with DB2 Version 9.7. There is a security vulnerability in the DB2 Audit Facility which allows an attacker to gain DB2 instance owner level privileges. This...

ManageEngine Access Manager Plus < 4.3 Build 4305 SQLi

The remote host is running a version of ManageEngine Access Manager Plus prior to 4.3 Build 4305. It is, therefore, affected by a SQL injection vulnerability. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the...

GHSA-3JP6-Q9CG-RVGJ Missing permission check in Jenkins build-publisher Plugin

Jenkins Build-Publisher Plugin 1.22 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain names and URLs of Jenkins servers that the plugin is configured to publish builds to, as well as builds pending for publication to tho...

Stored XSS vulnerability in Jenkins DotCi Plugin

DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...

Jenkins build-publisher plugin vulnerable to cross-site request forgery

A cross-site request forgery CSRF vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a crafted file name to an API endpoint. There is currently no workaround or patc...

GHSA-FQ2H-R2H9-PJ8R Jenkins NS-ND Integration Performance Publisher Plugin vulnerable to Cross-site Scripting

Jenkins NS-ND Integration Performance Publisher Plugin prior to version 4.8.0.147 does not escape configuration options of the Execute NetStorm/NetCloud Test build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...

GHSA-PHR4-94XX-259M Jenkins build-publisher plugin vulnerable to cross-site request forgery

A cross-site request forgery CSRF vulnerability in Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers to replace any config.xml file on the Jenkins controller file system with an empty file by providing a crafted file name to an API endpoint. There is currently no workaround or patc...

Jenkins Rundeck Plugin Missing Authorization vulnerability

Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers with Item/Read permission to obtain information about build artifacts of a given job, if the optional Run/Artifacts permission is enabled...

GHSA-JRQH-C9V8-CCX9 Path traversal in Jenkins build-publisher Plugin

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting...

GHSA-4JFQ-4FQC-5J9C Jenkins Rundeck Plugin Missing Authorization vulnerability

Jenkins Rundeck Plugin 3.6.11 and earlier does not perform Run/Artifacts permission checks in multiple HTTP endpoints, allowing attackers with Item/Read permission to obtain information about build artifacts of a given job, if the optional Run/Artifacts permission is enabled...

GHSA-Q9G4-9FX4-V533 Stored XSS vulnerability in Jenkins DotCi Plugin

DotCi Plugin 2.40.00 and earlier does not escape the GitHub user name parameter provided to commit notifications when displaying them in a build cause. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to submit crafted commit notifications to the...

Path traversal in Jenkins build-publisher Plugin

Jenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on the Jenkins controller file system by providing a crafted file name to an API endpoint. Additionally, this endpoint does not require POST requests, resulting...

Unbreakable Enterprise kernel security update

5.4.17-2136.311.6 - Revert 'KVM: x86: Print error code in exception injection tracepoint iff valid' Sherry Yang Orabug: 34535896 5.4.17-2136.311.5 - netfilter: nftables: do not allow RULEID to refer to another chain Thadeu Lima de Souza Cascardo Orabug: 34495567 CVE-2022-2586 - netfilter: nftable...

Build Numbers and Versions of Veeam ONE

This KB article lists all versions of Veeam ONE and their respective build numbers. For more information on downloading the latest version of Veeam ONE, visit: My Account Portal - Product Downloads Latest Downloads Page Veeam ONE -- What's New PDF Version | Build Number | Release Date | Release...

Build Numbers and Versions of Veeam Agent for IBM AIX

This KB article lists all versions of Veeam Agent for IBM AIX and their respective build numbers. For more information on downloading the latest version of Veeam Agent for IBM AIX , visit: Veeam Agent for IBM AIX -- Current Version Download Page Veeam Agent for IBM AIX -- What's New Current Versi...

Build Numbers and Versions of Veeam Agent for Oracle Solaris

This KB article lists all versions of Veeam Agent for Oracle Solaris and their respective build numbers. For more information on downloading the latest version of Veeam Agent for Oracle Solaris , visit: Veeam Agent for Oracle Solaris -- Current Version Download Page Veeam Agent for Oracle Solaris...

Build Numbers and Versions of Veeam Agent for Mac

This KB article lists all versions of Veeam Agent for Mac and their respective build numbers. For more information on downloading the latest version of Veeam Agent for Mac , visit: Veeam Agent for Mac -- Current Version Download Page Veeam Agent for Mac -- What's New Current Version Version | Bui...

Build Numbers and Versions of Veeam Plug-In for Microsoft Azure

This KB article lists all versions of the Veeam Plug-In for Microsoft Azure and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for Microsoft Azure 9 Releases Veeam Plug-In for Microso...

Build Numbers and Versions of Veeam Plug-In for AWS

This KB article lists all versions of the Veeam Plug-In for AWS and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for AWS 11 Releases Veeam Plug-In for AWS 11 Included with Veeam...

Build Numbers and Versions of Veeam Plug-In for Google Cloud

This KB article lists all versions of the Veeam Plug-In for Google Cloud and their respective plug-in and appliance build numbers. Version | Plug-In Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-In for Google Cloud 8 Releases Veeam Plug-In for Google Cloud ...