CVE-2018-1945: Improper Input Validation

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click...

PT-2019-9829

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description The issue allows attackers to obtain cookie values by sending a http link to a user or by planting this link in a site the user visits...

PT-2019-9822

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description The issue arises from the software's ability to interact between multiple actors and negotiate the algorithm used for protection...

PT-2019-9832

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description The issue allows unauthorized users to access sensitive information, which can then be used to launch further attacks on the system...

PT-2019-9816

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description A remote attacker could hijack the clicking action of a victim by persuading them to visit a malicious Web site, potentially launching...

PT-2019-9838

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description The issue generates an error message that includes sensitive information about its environment, users, or associated data, which could...

PT-2019-9827

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading t...

CVE-2018-1950: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430...

Cisco Unified Intelligence Center Web Interface XSS

The vulnerability of the software interface for creating reports in Cisco Unified Intelligence Center exists due to the lack of measures taken to protect the web page structure. Exploiting this vulnerability allows a malicious actor to send arbitrary requests to the vulnerable system via a web...

Cisco Unified Intelligence Center Arbitrary Action

The vulnerability of the Cisco Unified Intelligence Center software’s web interface is related to the lack of authentication for HTTP requests. Exploiting this vulnerability allows a malicious actor to perform arbitrary actions on a vulnerable device with user privileges, as long as the user clic...

Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1996)

Summary Websphere Application Server is shipped with Predictive Customer Intelligence. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the security bulletin Security Bulletin: Potenti...

Learn How XDR Can Take Breach Protection Beyond Endpoint Security

How do you know whether an attacker has infiltrated your network? Can you really rely on an Endpoint Detection and Response EDR solution to be your go-to technology for identifying security breaches? Endpoint detection and response EDR platform has been an important technology to detect...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to multiple security vulnerabilities

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to multiple security vulnerabilities. There are multiple vulnerabilities fixes to open source libraries distributed with IGI, other less secure algorithms for crypto, xss attacks and click...

CVE-2019-0267

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

CVE-2019-0267

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

Information disclosure

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

CVE-2019-0267

CVE-2019-0267 affects SAP Manufacturing Integration and Intelligence (MII), specifically versions 15.0, 15.1 and 15.2, where the Illuminator Servlet does not provide Anti-XSRF tokens. Root cause: lack of anti-forgery protections in the Illuminator Servlet, which can enable Cross-Site Request Forg...

SAP BusinessObjects Business Intelligence Platform Arbitrary File Upload Vulnerability

SAP BusinessObjects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP. The product has report generation, analysis, data visualization and other functions. An arbitrary file upload vulnerability exists in SAP BusinessObjects...

CVE-2019-0267: Cross-Site Request Forgery (CSRF)

SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, Illuminator Servlet currently does not provide Anti-XSRF tokens. This might lead to XSRF attacks in case the data is being posted to the Servlet from an external application...

PT-2019-4570

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.0 through 15.2 Description The issue is related to the lack of Anti-XSRF tokens in the Illuminator Servlet, which could lead to cross-site request forgery XSRF attacks if data is poste...