CVE-2013-2999

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

Sql injection

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

CVE-2013-3001

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

Directory traversal

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-3000

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

CVE-2013-3001

Summary: CVE-2013-3001 refers to a directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The root cause is a path traversal flaw that could allow a remote attacker to read arbitrary files on the system via crafted requests. Affected products/versi...

CVE-2013-2999

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

CVE-2013-2999

The IBM Security Bulletin for CVE-2013-2999 confirms an XSS vulnerability in InfoSphere Data Replication Dashboard (affecting versions 9.7 and 10.1). The issue arises from improper validation of user-supplied input in the dashboard, enabling a remote attacker to inject arbitrary web script or HTM...

CVE-2013-3000

CVE-2013-3000 concerns IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The connected IBM bulletin confirms a SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands via crafted input, potentially reading or modifying replication-control ...

CVE-2013-3001

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-3001: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-2999: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

CVE-2013-3000: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

Security Bulletin: InfoSphere Replication Dashboard is affected by a vulnerability in the IBM Runtime Environment, Java Technology Edition (CVE-2014-4263)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java Technology Edition, Version 7.1.1.0 that is used by InfoSphere Replication Dashboard. These issues were disclosed as part of the IBM Java SDK updates in July 2014. IBM InfoSphere Replication Dashboard is affected by a sing...

Security Bulletin: InfoSphere Data Replication Dashboard is affected by a vulnerability in the IBM Runtime Environment, Java™ Technology Edition (CVE-2014-0453)

Summary An unspecified vulnerability related to the Security component has partial confidentiality impact, partial integrity impact, and no availability impact. Vulnerability Details CVE ID: CVE-2014-0453 CVSS: CVSS Base Score: 4 CVSS Temporal Score: See for the current score CVSS Environmental...

Security Bulletin: Vulnerability in InstallAnywhere affects IBM InfoSphere Change Data Capture installers (CVE-2016-4560)

Summary InstallAnywhere generates installation executables on Microsoft Windows which are vulnerable to a DLL-planting exploit affecting the Change Data Capture CDC components within the IBM InfoSphere Data Replication and IBM InfoSphere Change Data Delivery families of products. Vulnerability...

Six Vulnerabilities Found in Dell EMC’s Disaster Recovery System, One Critical

A pen-tester has found six vulnerabilities in Dell EMC RecoverPoint devices, including a critical remote code execution flaw that could allow total system compromise. EMC RecoverPoint is a disaster recovery tool that can be used to back up local and remote information storage, across data centers...

NetEx HyperIP Post-Auth Remote Command Execution Vulnerability

HyperIP is a WAN optimized virtual appliance. Deploying HyperIP enables data replication, backup, recovery and data center migration. HyperIP has a remote command execution vulnerability in its implementation. The principle of this vulnerability is that setting the setval parameter as a malformed...

Not all Cloud Solutions are Created Equal

The errant swing of a backhoe in a New Jersey field cuts through a major cloud provider's underground cable, bringing activity along the U.S. Eastern Seaboard to a crashing halt. The outage hits some businesses hard. Every minute of downtime means thousands of dollars of lost revenue and hordes o...