CVE-2018-1525: Cleartext Transmission of Sensitive Information

IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM...

PT-2018-12951

Name of the Vulnerable Software and Affected Versions IBM i2 Enterprise Insight Analysis version 2.1.7 Description The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information. An attacker could exploit this to...

PT-2018-12876

Name of the Vulnerable Software and Affected Versions IBM i2 Enterprise Insight Analysis version 2.1.7 Description A remote attacker could hijack the clicking action of the victim by persuading them to visit a malicious Web site, potentially launching further attacks against the victim...

PT-2018-12877

Name of the Vulnerable Software and Affected Versions IBM i2 Enterprise Insight Analysis version 2.1.7 Description The issue allows web pages to be stored locally, which can then be read by another user on the system. Recommendations For IBM i2 Enterprise Insight Analysis version 2.1.7, consider...

Security Bulletin: IBM i2 Analyst's Notebook. CVE-2018-1527

Summary IBM i2 Analyst's Notebook version 9.0.8 addresses the XML Entity Injection vulnerability detailed in CVE-2018-1527 Vulnerability Details When using any of the import features on IBM i2 Analyst's Notebook Cellebrite, XRY, and Notebook Exchange from the Import menu it is possible to import...

Security Bulletin: Onyx link security (PO07142)

Summary Links that have the same access levels as their ends, but receive them through different security settings, are not returned correctly in search results. This can result in search results being incorrectly removed. Vulnerability Details This issue affects systems that use IBM i2 Analyze...

Security Bulletin: CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr

Summary A potential security vulnerability has been identified for systems that are set up to use basic authentication. The version of Solr that is included with both IBM i2 Enterprise Insight Analysis and IBM i2 Analyze is affected, and has been patched in the latest fix pack. Vulnerability...

Security Bulletin: A security vulnerability has been identified in WebSphere Liberty bundled with IBM i2 Analyze. (CVE 2015-7450)

Summary The Java serialization attack on Apache Commons Collections CVE-2015-7450 affects the configuration of IBM WebSphere Application Server Liberty Profile shipped as an embedded component of IBM i2 Intelligence Analysis Platform / IBM i2 Analyze. Vulnerability Details Please consult the...

Security Bulletin: A security vulnerability has been identified in WebSphere Application Server bundled with IBM i2 Intelligence Analysis Platform. (CVE 2015-7450)

Summary WebSphere Application Server is shipped as a component of IBM i2 Intelligence Analysis Platform. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin...

Security Bulletin: Vulnerability with Diffie-Hellman ciphers may affect IBM i2 Intelligence Analysis Platform (CVE-2015-4000)

Summary The LogJam Attack on Diffie-Hellman ciphers CVE-2015-4000 may affect some configurations of the IBM WebSphere Application Server used with the IBM i2 Intelligence Analysis Platform. The IBM HTTP Server used by IBM i2 Intelligence Analysis Platform is not affected. Vulnerability Details...

AXIS Multiple Products - Authenticated Remote Command Execution via devtools Vector

Exploit for linux platform in category web applications Advisory Information ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Title: AXIS Multiple Products Authenticated Remote Command Execution via devtools vector + Vendor: AXIS Communications + Research and Advisory: Orwelllabs ...

Zhone ADSL2+ 4P Bridge & Router (Broadcom) - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Document Title: =============== Zhone ADSL2+ 4P Bridge & Router Broadcom - Multiple Vulnerabilities Download: http://www.zhone.com/support/downloads/cpe/6218-I2/6218-I2R030220AnnexA.zip Product & Service Introduction:...

CVE-2012-3247

Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors...

CVE-2012-3247

The CVE-2012-3247 affects HP Integrity Server RX2800 i2, BL860c i2, BL870c i2 and BL890c i2. The DoS results are linked to firmware before specific versions: rx2800 i2 before 26.30 and BL860c/BL870c/BL890c i2 before 26.31. HP’s Security Bulletin HPSBHF02804 rev.1 documents a potential DoS vulnera...

PT-2012-4594

Name of the Vulnerable Software and Affected Versions HP Integrity Server BL860c i2 versions prior to 26.31 HP Integrity Server BL870c i2 versions prior to 26.31 HP Integrity Server BL890c i2 versions prior to 26.31 HP Integrity Server rx2800 i2 versions prior to 26.30 Description The issue allow...

CVE-2012-3247: Undefined Security Weakness

Unspecified vulnerability on the HP Integrity Server BL860c i2, BL870c i2, and BL890c i2 with firmware before 26.31 and the HP Integrity Server rx2800 i2 with firmware before 26.30 allows local users to cause a denial of service via unknown vectors...

I2 Soft SQL Injection

Exploit Title: Ý2 Soft SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.i2soft.in/ Date : 17.02.2012 Platform : Php Demo Site : http://www.shokalerkhabor.com/online/detailsnews.php?id=38731&&%20pageid=7 SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan...

i2studios Remote File Inclusion

+Exploit Title: i2studios Remote File Inclusion Vulnerability +Author : ^Xecuti0n3r + Date : 22.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intitle:"i2 STUDIOS" inurl:"page=http://" + Category : Web Apps RFi Choose any site that comes up when you enter the dork intext:"i2...