221 matches found
IBM Cloud Pak for Data 安全漏洞
IBM Cloud Pak for Data is a cloud-native solution from International Business Machines IBM that allows customers to use data and analyze it quickly and efficiently. A security vulnerability exists in IBM Cloud Pak for Data version 4.0 that stems from a denial of service that could result from a...
IBM Cloud Pak for Data 安全漏洞
IBM Cloud Pak for Data is a cloud-native solution from International Business Machines IBM that allows customers to use data and analyze it quickly and efficiently. A security vulnerability exists in IBM Cloud Pak for Data version 4.0 that stems from a misconfiguration of the security environment...
CVE-2023-30444
IBM Watson Machine Learning on Cloud Pak for Data 4.0 and 4.5 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 253350...
IBM Cloud Pak for Data 代码问题漏洞
IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. A server-side request forgery vulnerability exists in IBM Cloud Pak for Data versions 4.0 and 4.5 that stems from the...
Code injection
IBM Cloud Pak for Data 4.5 and 4.6 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 232034...
IBM Cloud Pak for Data 代码问题漏洞
IBM Cloud Pak for Data is a data and AI platform with data structure from International Business Machines IBM. All data can be made available for AI and analytics on any cloud. An arbitrary file upload vulnerability exists in IBM Cloud Pak for Data version 4.5, 4.6. The vulnerability stems from t...
PT-2023-4607 · Ibm · Ibm Cognos Analytics On Cloud Pak For Data
Name of the Vulnerable Software and Affected Versions: IBM Cognos Analytics on Cloud Pak for Data version 4.0 Description: The issue is related to insufficient protection of service data when processing the seccomp parameter, which could allow a remote attacker to compromise the security of...
IBM Watson Knowledge Catalog SQL注入漏洞
IBM Watson Knowledge Catalog is a unified data catalog system from International Business Machines IBM, Inc. IBM Watson Knowledge Catalog on Cloud Pak for Data version 4.5.0 is vulnerable to SQL injection. An attacker could use the vulnerability to send specially crafted SQL statements that could...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in Vim (CVE-2022-1629)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow caused by a buffer over-read in the findnextquote component of Vim CVE-2022-1629. Vim is used as part of the base image included in our service components. Please read the details for...
Security Bulletin: IBM Cloud Pak for Data System 1.0 is vulnerable to denial of service due to Apache Log4j (CVE-2021-45105)
Summary Apache Log4j is used by IBM Cloud Pak for Data System 1.0 in Openshift Logging. This bulletin provides a remediation for the Apache Log4j vulnerability CVE-2021-45105. Vulnerability Details CVEID: CVE-2021-45105 DESCRIPTION: Apache Log4j is vulnerable to a denial of service, caused by the...
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to an unspecified vulnerability in Java SE ( CVE-2022-21277)
Summary An unspecified vulnerability in Oracle Java SE - CVE-2022-21277 related to the ImageIO component has been identified that affects IBM Watson Assistant for IBM Cloud Pak for Data. Java SE is used by IBM Watson Assistant for IBM Cloud Pak for Data as part of its platform for developement of...
Vulnerabilities fixed in IBM Db, Db2 on OpenShift and Cloud Pak for Data
Several vulnerabilities have been fixed in IBM Db2 On Openshift and IBM Db2 and Db2 Warehouse on Cloud Pak for Data. These vulnerabilities allow an attacker to execute arbitrary code execute arbitrary code or cause a denial-of-service DoS. For the vulnerabilities with attributes CVE-2021-33196 an...
IBM Watson Query 安全漏洞
IBM Watson Query is a general-purpose query engine from IBM USA. It can perform distributed and virtualized queries across databases, data warehouses, data lakes and streaming data without additional manual changes, data movement or replication. IBM Watson Query with Cloud Pak for Data as a Servi...
CVE-2022-22410
IBM Watson Query with Cloud Pak for Data as a Service could allow an authenticated user to obtain sensitive information that would allow them to examine or alter system configurations or data sources connected to the service. IBM X-Force ID: 222763...
CVE-2022-22353
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement. IBM X-Force ID: 220480...
IBM Data Virtualization(DV) on Cloud Pak for Data(CPD) 安全漏洞
IBM Data Virtualization on Cloud Pak for Data is a cloud-native solution from IBM USA. It allows you to work with data quickly and efficiently. An information disclosure vulnerability exists in IBM Data Virtualization on Cloud Pak for Data, which can be exploited by attackers to bypass data maski...
CVE-2021-38899
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575...
CVE-2021-38899
IBM Cloud Pak for Data 2.5 could allow a local user with special privileges to obtain highly sensitive information. IBM X-Force ID: 209575...