EUVD-2013-0510

Malware in sbrugna...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2018-1652)

Summary IBM MQ Appliance has addressed a denial of service vulnerability. Vulnerability Details CVEID: CVE-2018-1652 DESCRIPTION: IBM WebSphere DataPower Appliances and IBM MQ Appliance could allow a local user to cause a denial of service through unknown vectors. CVSS Base Score: 6.2 CVSS Tempor...

Security Bulletin: WebSphere DataPower Appliances is affected by multiple issues

Summary WebSphere DataPower Appliances has addressed the following vulnerabilities: CVE-2018-1447 CVE-2018-1388 CVE-2016-0702 CVE-2016-0705 CVE-2017-3732 CVE-2017-3736 CVE-2018-1428 Vulnerability Details CVEID: CVE-2018-1447 DESCRIPTION: The GSKit CMS KDB logic fails to salt the hash function...

Security Bulletin: Vulnerability in Diffie-Hellman ciphers affects IBM Datapower Gateways (CVE-2015-4000)

Summary The Logjam Attack on TLS connections using the Diffie-Hellman DH key exchange protocol affects IBM Datapower Gateways. Vulnerability Details CVEID: CVE-2015-4000 DESCRIPTION: The TLS protocol could allow a remote attacker to obtain sensitive information, caused by the failure to properly...

PT-2018-12348

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower Appliances versions 7.1 through 7.6 Description The issue allows for a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume...

CVE-2018-1421: Improper Restriction of XML External Entity Reference

IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139023...

CVE-2017-1591

IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

CVE-2017-1591: Improper Neutralization of Input During Web Page Generation

IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force...

IBM WebSphere DataPower Appliances Cross-Site Scripting Vulnerability

IBM WebSphere DataPower Appliances is a set of networking appliances from IBM in the United States. The appliances are primarily used to simplify, protect and accelerate XML and Web services deployments in SOA. A cross-site scripting vulnerability exists in IBM WebSphere DataPower Appliances...

PT-2017-14279

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower Appliances versions 7.0.0 through 7.6 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...