Lucene search
+L

563 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/04/01 1:15 p.m.67 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterprise

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition used by IBM Integration Bus & IBM App Connect Enterprise. These issues were disclosed as part of the IBM Java SDK updates in October 2021. Vulnerability Details CVEID: CVE-2021-35578 DESCRIPTION: An unspecified...

9.8CVSS1AI score0.159EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/31 5:53 a.m.58 views

Security Bulletin: A vulnerability in IBM Java SDK affects IBM Tivoli Netcool Impact (CVE-2021-35560, CVE-2021-35578, CVE-2021-35564, CVE-2021-35565, CVE-2021-35588, CVE-2021-41035)

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM Tivoli Netcool Impact. IBM Tivoli Netcool Impact has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2021-35560 DESCRIPTION: An unspecified vulnerability in Java SE related to the...

9.8CVSS8.7AI score0.07395EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/03/19 4:16 a.m.64 views

Security Bulletin: Vulnerabilities in Java SE and Eclipse OpenJ9 affect IBM Control Center (CVE-2020-14803 & CVE-2020-27221)

Summary A buffer overflow flaw has been found in a widely used function in the OpenJ9 JVM, which is employed when writingcharacters to a file. We have not identified any specific exploits, but it is very likely that the flaw is exploitable to trigger a crash or run arbitrary code. The fix ensures...

9.8CVSS9.1AI score0.03186EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/22 11:50 a.m.59 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2021-35560...

9.8CVSS7.1AI score0.07395EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/22 11:22 a.m.52 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2021-35560...

9.8CVSS7.1AI score0.07395EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/08 7:40 p.m.45 views

Security Bulletin: Multiple security vulnerabilities have been identified in IBM® Java SDK that affect IBM Security Directory Suite - October 2021 CPU

Summary There are vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Security Directory Suite. Vulnerability Details CVEID: CVE-2021-35560 DESCRIPTION: An unspecified vulnerability in Java SE related to the Deployment component could allow an unauthenticated attacker to...

9.8CVSS8.5AI score0.06679EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/01 11:37 a.m.35 views

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Spectrum Protect Snapshot on AIX and Linux (CVE-2020-27221)

Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2021. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot which may be affected by CVE-2020-27221 on AIX and Linux. UPDATED: 26 May 2021 - Added Fix for 4.1...

9.8CVSS9.8AI score0.01532EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/01 11:37 a.m.31 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX (CVE-2019-4473, CVE-2019-11771)

Summary Multiple vulnerabilities in IBM Runtime Environment Java were disclosed as part of the IBM Java SDK updates in July 2019. IBM Runtime Environment Java is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX. Vulnerability Details CVEID: CVE-2019-4473...

8.4CVSS7.8AI score0.0045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/01 11:37 a.m.33 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX and Linux (CVE-2018-1890, CVE-2018-12547)

Summary Multiple vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2019. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX and Linux. Vulnerability Details CVEID:...

9.8CVSS0.5AI score0.02744EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2022/02/01 11:37 a.m.41 views

Security Bulletin: Vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot for VMware (CVE-2020-27221, CVE-2020-14782)

Summary Vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in October 2020 and January 2021. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot for VMware and may be affected by the below vulnerabilities CVEs. Vulnerability...

9.8CVSS7.7AI score0.02272EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/23 4:02 p.m.56 views

Security Bulletin: Multiple Vulnerabilities in Java Runtime affects IBM SPSS Statistics Subscription

Summary Multiple vulnerabilities in Java Runtime Environment Version 8.0 used by IBM SPSS Statistics Subscription. IBM SPSS Statistics Subscription has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-35578 DESCRIPTION: An unspecified vulnerability in Java SE related to the JS...

9.8CVSS6.1AI score0.06679EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/23 3:56 p.m.375 views

Security Bulletin: Mutliple Vulnerabilities in Java Runtime affects IBM SPSS Statistics

Summary Multiple vulnerabilities in Java Runtime Environment Version 8.0 used by IBM SPSS Statistics. IBM SPSS Statistics has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-35578 DESCRIPTION: An unspecified vulnerability in Java SE related to the JSSE component could allow a...

9.8CVSS6.1AI score0.06679EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/09 4:57 p.m.50 views

Security Bulletin: March 2021 : Multiple vulnerabilities in IBM Java Runtime affect CICS Transaction Gateway

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7.0, 7.1 and 8.0 used by CICS Transaction Gateway. CICS Transaction Gateway has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2020-14803 DESCRIPTION: An unspecified vulnerability in Java SE cou...

9.8CVSS9.5AI score0.03186EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/12/02 9:41 p.m.165 views

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.1.7 Fix Pack 4 and IBM Cognos Analytics 11.2.1. Vulnerability Details CVEID: CVE-2015-2156 DESCRIPTION: Netty could allow a remote attacker to bypass restrictions, caused by the improper validation of characters in a...

9.8CVSS10.3AI score0.99215EPSS
SaveExploits31Affected Software1
RedhatCVE
RedhatCVE
added 2021/11/30 5:04 p.m.41 views

CVE-2021-41035

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...

9.8CVSS4.7AI score0.01824EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/25 3:15 p.m.20 views

CVE-2021-41035

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...

9.8CVSS6.7AI score
SaveExploits0References4
NVD
NVD
added 2021/10/25 3:15 p.m.29 views

CVE-2021-41035

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...

9.8CVSS0.01824EPSS
SaveExploits0References4
Prion
Prion
added 2021/10/25 3:15 p.m.25 views

Design/Logic Flaw

In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...

7.5CVSS9.4AI score0.01824EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/10/25 3:05 p.m.160 views

CVE-2021-41035

CVE-2021-41035 affects Eclipse OpenJ9 prior to 0.29.0. The root cause is that the JVM does not throw IllegalAccessError for MethodHandles invoking inaccessible interface methods. This could allow a remote attacker to gain elevated privileges and execute arbitrary code on the system; exploitation ...

9.8CVSS9.4AI score0.01824EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2021/10/25 12:00 a.m.7 views

Eclipse Openj9 安全漏洞

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse Openj9 versions prior to 0.29.0 that stems from the JVM not throwing an IllegalAccessError exception for MethodHandles that...

9.8CVSS6.5AI score0.01824EPSS
SaveExploits0References25
Rows per page
Query Builder