CVE-2013-3001

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

CVE-2013-3000

SQL injection vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. IBM X-Force ID: 84116...

CVE-2013-2999

Cross-site scripting XSS vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 84115...

CVE-2013-3001

Summary: CVE-2013-3001 refers to a directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The root cause is a path traversal flaw that could allow a remote attacker to read arbitrary files on the system via crafted requests. Affected products/versi...

CVE-2013-3000

CVE-2013-3000 concerns IBM InfoSphere Data Replication Dashboard (versions 9.7 and 10.1). The connected IBM bulletin confirms a SQL injection vulnerability that could allow a remote attacker to execute arbitrary SQL commands via crafted input, potentially reading or modifying replication-control ...

CVE-2013-2999

The IBM Security Bulletin for CVE-2013-2999 confirms an XSS vulnerability in InfoSphere Data Replication Dashboard (affecting versions 9.7 and 10.1). The issue arises from improper validation of user-supplied input in the dashboard, enabling a remote attacker to inject arbitrary web script or HTM...

CVE-2013-3001

Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vectors. IBM X-Force ID: 84127...

Security Bulletin: Vulnerability in OpenSSL affects IBM InfoSphere Information Server (CVE-2016-2107)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by IBM InfoSphere Information Server. IBM InfoSphere Information Server has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote...

Security Bulletin: Vulnerabilities in GSKit and GSKit-Crypto affect IBM InfoSphere Information Server

Summary Vulnerabilities in GSKit and GSKit-Crypto were addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2016-0705 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error when parsing DSA private keys. An attacker could exploit this...

Security Bulletin: IBM InfoSphere Information Server is vulnerable to privilege escalation

Summary A privilege escalation vulnerability was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2017-1350 DESCRIPTION: IBM InfoSphere Information Server could allow a user to escalate their privileges to administrator due to improper access controls. CVSS Base...

Security Bulletin: Vulnerability affects Watson Explorer Foundational Components

Summary Security vulnerabilities have been identified in IBM® Runtime Environment Java™ Technology Edition that is used by Watson Explorer. Vulnerability Details CVEID: CVE-2017-10295 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java SE Embedded, JRockit...

Security Bulletin: Vulnerability affects Watson Explorer Foundational Components

Summary A security vulnerability affects IBM Watson Explorer Foundational Components. Vulnerability Details CVEID: CVE-2016-7055 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an error in a Broadwell-specific Montgomery multiplication procedure. By sending specially crafted...

Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-2107)

Summary OpenSSL vulnerabilities were disclosed on May 3, 2016 by the OpenSSL Project. OpenSSL is used by the Watson Explorer Foundational Components. Watson Explorer has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2107 DESCRIPTION: OpenSSL could allow a remote attacker to...

Security Bulletin: Vulnerability in OpenSSL affects Watson Explorer (CVE-2016-0702)

Summary A vulnerability in OpenSSL affects Watson Explorer. Vulnerability Details CVEID: CVE-2016-0702 DESCRIPTION: The MODEXPCTIMECOPYFROMPREBUF function in crypto/bn/bnexp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly consider cache-bank access times during modular...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime affect IBM Content Classification (CVE-2016-0494, CVE-2016-0466 and CVE-2016-0603)

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Version 6.0 that is used by IBM Content Classification. These vulnerabilities have different impacts and different levels of risk. Vulnerability Details CVEID: CVE-2016-0494 DESCRIPTION: An unspecifie...

Security Bulletin: Vulnerability in IBM Content Classification (CVE-2013-5879, CVE-2014-0411)

Summary CVE-2013-5879 Oracle Outside In Technology Outside In Maintenance unauthorized access CVE-2014-0411 A vulnerability exists in IBM SDK Java™ Technology Edition Version 6 that is shipped with IBM Content Classification. It is related to the Java™ Secure Socket Extension component...

Security Bulletin: IBM Security Guardium Database Activity Monitor is affected by Sensitive Information Leakage vulenrability (CVE-2017-1595)

Summary IBM Security Guardium Database Activity Monitor could allow a local attacker to obtain sensitive information via unspecified vectors. IBM Security Guardium Database Activity Monitor has provided a fix for this vulnerability. Vulnerability Details CVEID: CVE-2017-1595 DESCRIPTION: IBM...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM InfoSphere Guardium Data Redaction

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 used by Guardium Data Redaction. These issues were disclosed as part of the IBM Java SDK updates in Jul 2017 Vulnerability Details CVEID: CVE-2017-10067 DESCRIPTION: An unspecified vulnerability in Oracle...

Security Bulletin: IBM InfoSphere Guardium is affected by Cleartext Transmission of Sensitive Information vulnerability (CVE-2016-0238 )

Summary IBM Security Guardium transmits sensitive data in cleartext in the query of the request. This could allow an attacker to obtain sensitive information using man in the middle techniques. Vulnerability Details CVEID: CVE-2016-0238 DESCRIPTION: IBM Security Guardium transmits sensitive data ...

Security Bulletin: Vulnerabilities in OpenSource libxml2 affect IBM Security Guardium (CVE-2016-2073)

Summary libxml2 is vulnerable to a heap-based buffer overflow. IBM Security Guardium has addressed the applicable CVE Vulnerability Details CVEID: CVE-2016-2073 DESCRIPTION: libxml2 is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds read in the htmlParseNameComplex function...