1019 matches found
Cross site scripting
IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...
CVE-2021-20529
IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...
CVE-2021-20529
IBM Sterling Control Center (IBM Control Center) vulnerability CVE-2021-20529: information disclosure in version 6.2.0.0 that could reveal sensitive version data, enabling further targeted attacks. CVSS v3.1/3.0 scores ~5.3 (MEDIUM). Remediation: apply iFix08 for 6.2.0.0. Other documents corrobor...
CVE-2021-20528
IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...
CVE-2021-20528
CVE-2021-20528 affects IBM Control Center 6.2.0.0. The issue is a cross-site scripting vulnerability in the Web UI that could allow an attacker to embed arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Remediation provided by IBM is iFix08 for 6.2.0.0;...
IBM Sterling Control Center Cross-Site Scripting Vulnerability (CNVD-2021-36550)
IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. A cross-site scripting vulnerability exists in IBM Sterling Control Center that allows a user to embed arbitrary JavaScript code in the Web UI to change the intended...
IBM Sterling Control Center Information Disclosure Vulnerability
IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. An information disclosure vulnerability exists in IBM Sterling Control Center, which stems from a vulnerability that could allow a user to obtain sensitive version...
Security Bulletin: Cross-Site Scripting Vulnerability Affects IBM Sterling Control Center (CVE-2021-20528)
Summary IBM Sterling Control Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. Vulnerability Details CVEID:...
Security Bulletin: General Information Vulnerability Affects IBM Control Center (CVE-2021-20529)
Summary IBM Sterling Control Center could allow a user to obtain sensitive version information that could be used in further attacks against the system. Vulnerability Details CVEID: CVE-2021-20529 DESCRIPTION: IBM Sterling Control Center could allow a user to obtain sensitive version information...
IBM Sterling Control Center 信息泄露漏洞
IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. An information disclosure vulnerability exists in IBM Sterling Control Center, which stems from a vulnerability that could allow a user to obtain sensitive version...
CVE-2021-20528
IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761...
IBM Sterling Control Center 跨站脚本漏洞
IBM Sterling Control Center is an application system from IBM in the United States. A centralized monitoring and management system. A cross-site scripting vulnerability exists in IBM Sterling Control Center that allows a user to embed arbitrary JavaScript code in the Web UI to change the intended...
CVE-2021-20529
IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the system. IBM X-Force ID: 198763...
Security Bulletin: Multiple CKEditor Vulnerabilities Affect IBM Control Center
Summary Muliple CKEditor vulnerablities affect IBM Control Center. See vulnerability details for descriptions. Vulnerability Details CVEID: CVE-2018-17960 DESCRIPTION: CKEditor is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could...
Security Bulletin: Apache Ant Vulnerabilities Affect IBM Control Center (CVE-2020-1945, CVE-2020-11979)
Summary Apache Ant could allow a remote attacker to bypass security restrictions. Vulnerability Details CVEID: CVE-2020-1945 DESCRIPTION: Apache Ant could allow a remote attacker to bypass security restrictions, caused by the use of an insecure temporary directory to store source files. By sendin...
Security Bulletin: Multiple IBM MQ Vulnerabilities Affect IBM Control Center
Summary Multiple IBM MQ vulnerabilities affect IBM Control Center. See vulnerability details for descriptions. Vulnerability Details CVEID: CVE-2020-4320 DESCRIPTION: IBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the...
Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center
Summary Multiple Apache Tomcat vulnerabilities affect IBM Control Center. See vulnerability details for descriptions. Vulnerability Details CVEID: CVE-2020-9484 DESCRIPTION: Apache Tomcat could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe...
Security Bulletin: H2 Database Vulnerabilities Affect IBM Control Center (CVE-2018-10054, CVE-2018-14335)
Summary H2 Database could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of alias and could allow a remote attacker to obtain sensitive information, caused by improper handling of permissions in the backup function. Vulnerability Details CVEID:...
Security Bulletin: Hibernate ORM Vulnerabilities Affect IBM Control Center (CVE-2019-14900, CVE-2020-25638)
Summary Hibernate ORM is vulnerable to SQL injection. Vulnerability Details CVEID: CVE-2019-14900 DESCRIPTION: Hibernate ORM is vulnerable to SQL injection. The implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the...
Security Bulletin: Eclipse Jetty Vulnerability Affects IBM Control Center (CVE-2020-27216)
Summary Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system. Vulnerability Details CVEID: CVE-2020-27216 DESCRIPTION: Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition in th...