EUVD-2013-0494

Malware in sbrugna...

Security Bulletin: Javadoc vulnerability exists in the IMS Connect API for Java component of IMS Enterprise Suite (CVE-2013-1571)

Abstract The IMS™ Connect API for Java™ component of IMS Enterprise Suite version 2.2 contains a frame injection vulnerability for Javadoc™. Content VULNERABILITY DETAILS CVE ID : CVE-2013-1571 DESCRIPTION HTML documentation generated by the Javadoc tool contains a security vulnerability. The...

CVE-2016-2887

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-2887: Exposure of Sensitive Information to an Unauthorized Actor

IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

PT-2016-5269

Name of the Vulnerable Software and Affected Versions IBM IMS Enterprise Suite Data Provider versions prior to 3.2.0.1 for Microsoft .NET Description The issue allows remote authenticated users to obtain sensitive information or modify data. Recommendations For versions prior to 3.2.0.1, update t...

CVE-2013-3003

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

Code injection

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

CVE-2013-3003

The IBM IMS Enterprise Suite SOAP Gateway (versions 1.1, 2.1, 2.2) is affected by CVE-2013-3003, among others, with a remote attacker able to execute arbitrary commands. The IBM bulletin specifies that SOAP Gateway users are authenticated via OS credentials and exploitation is constrained by the ...

CVE-2013-3003

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

CVE-2013-3003: Undefined Security Weakness

Unspecified vulnerability in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 allows remote authenticated users to execute arbitrary commands via unknown vectors...

PT-2013-4088

Name of the Vulnerable Software and Affected Versions IBM IMS Enterprise Suite versions 1.1 through 2.2 Description The issue allows remote authenticated users to execute arbitrary commands. The exact vectors used for exploitation are not specified. Recommendations For versions 1.1 through 2.2, a...

Design/Logic Flaw

The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-0483

IBM’s Security Bulletin links CVE-2013-0483 to IMS Enterprise Suite SOAP Gateway versions 1.1, 2.1, and 2.2, where the login process could transmit credentials in cleartext, enabling exposure over the network. The affected components are the SOAP Gateway in IBM IMS Enterprise Suite for z/OS, Linu...

CVE-2013-0483: Undefined Security Weakness

The login component in SOAP Gateway in IBM IMS Enterprise Suite 1.1, 2.1, and 2.2 uses cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network...

PT-2013-2376

Name of the Vulnerable Software and Affected Versions IBM IMS Enterprise Suite versions 1.1 through 2.2 Description The issue concerns the login component in SOAP Gateway, which uses cleartext credentials. This allows remote attackers to obtain sensitive information by sniffing the network...