CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Security Bulletin: IBM OmniFind Enterprise Edition and IBM Content Analytics – Oracle Critical Patch Updates February 2013 (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)

Abstract Potential security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM OmniFind Enterprise Edition and IBM Content Analytics and products. Content The products listed below may be affected by security vulnerabilities reported by Oracle’s February 2013 Critical Patch...

5CVSS6.4AI score0.35584EPSS

Exploits2Affected Software2

IBM Security Bulletins•added 2022/09/25 11:13 p.m.•29 views

Security Bulletin: Potential denial-of-service (DoS) issues related to Jetty application server identified in OmniFind Enterprise Edition and Content Analytics with Enterprise Search products

Abstract Abstract: The Jetty application server may contain denial-of-service DoS vulnerabilities CVE-2011-4461. Content The products listed below may be affected by potential denial-of-service DoS vulnerabilities of the Jetty application server when their search or analytics applications are...

5.3CVSS5.6AI score0.05044EPSS

Exploits1Affected Software2

IBM Security Bulletins•added 2022/09/25 11:13 p.m.•32 views

Security Bulletin: IBM OmniFind Enterprise Edition and IBM Content Analytics (CVE-2013-0599, CVE-2013-0464, CVE-2013-0467)

Abstract Potential security vulnerabilities exist in the IBM Eclipse Help System that is shipped with the IBM OmniFind Enterprise Edition and IBM Content Analytics products. Content The products listed below may be affected by security vulnerabilities in the IBM Eclipse Help System. This issue is...

5CVSS0.4AI score0.02112EPSS

Exploits1Affected Software2

IBM Security Bulletins•added 2022/09/25 9:6 p.m.•19 views

Security Bulletin: IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition Java API Documentation Frame Injection Vulnerability (CVE-2013-1571)

Abstract The Java API documentation contains a frame injection vulnerability. Content VULNERABILITY DETAILS DESCRIPTION: HTML documentation generated by the Javadoc tool contains a security vulnerability. The vulnerability allows an attacker to craft a malicious link to the documentation that...

4.3CVSS7.5AI score0.66817EPSS

Exploits1Affected Software2

IBM Security Bulletins•added 2022/05/06 5:9 p.m.•26 views

Security Bulletin: Due to use of Apache Log4j, OmniFind Text Search Server for DB2 for i is vulnerable to arbitrary code execution (CVE-2021-4104)

Summary There is a vulnerability in Apache Log4j CVE-2021-4104 as described in the vulnerability details section. Apache Log4j v1 is used by OmniFind Text Search Server for DB2 for i for generating logs and diagnostic traces in some of its components. IBM has addressed the vulnerability in OmniFi...

7.5CVSS1.5AI score0.81147EPSS

Exploits9Affected Software5

IBM Security Bulletins•added 2018/06/17 1:7 p.m.•25 views

Security Bulletin: Vulnerabilities exist in Watson Explorer Analytical Components, Watson Explorer Annotation Administration Console, Watson Content Analytics, IBM Content Analytics, and OmniFind Enterprise Edition

Summary Security vulnerabilities have been identified in IBM Watson Explorer Analytical Components, Watson Explorer Foundational Components Annotation Administration Console, IBM Watson Content Analytics, IBM Content Analytics, and OmniFind Enterprise Edition. Not all vulnerabilites affect all...

7.8CVSS0.5AI score0.35927EPSS

Exploits0Affected Software3

IBM Security Bulletins•added 2018/06/17 1:6 p.m.•20 views

Security Bulletin: Vulnerabilities in IBM Java Runtime affect Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition (CVE-2015-7575, CVE-2015-4872)

Summary There are vulnerabilities in IBM® Runtime Environment Java™ Technology Edition that is used by Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition. Vulnerability Details CVEID: CVE-2015-7575 DESCRIPTION: The TLS protocol could allow weaker than expected security...

5.9CVSS0.6AI score0.03703EPSS

Exploits0Affected Software3

IBM Security Bulletins•added 2018/06/17 1:4 p.m.•18 views

Security Bulletin: Vulnerability in RC4 stream cipher affects Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition (CVE-2015-2808)

Summary The RC4 "Bar Mitzvah" attack for SSL/TLS affects Watson Explorer, Watson Content Analytics, and OmniFind Enterprise Edition. Vulnerability Details CVEID: CVE-2015-2808 DESCRIPTION: The RC4 algorithm, as used in the TLS protocol and SSL protocol, could allow a remote attacker to obtain...

5CVSS0.8AI score0.74006EPSS

Exploits0Affected Software3

IBM Security Bulletins•added 2018/06/17 1:2 p.m.•23 views

Security Bulletin: Open Source Apache Struts V1 ClassLoader manipulation vulnerability (CVE-2014-0114) in IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition

Summary An Open Source Apache Struts V1 ClassLoader manipulation vulnerability affects the web application server that is used by the administration console in IBM Content Analytics with Enterprise Search now named IBM Watson Content Analytics and IBM OmniFind Enterprise Edition. Vulnerability...

7.5CVSS1AI score0.95821EPSS

Exploits4Affected Software2

IBM Security Bulletins•added 2018/06/17 1:1 p.m.•29 views

Security Bulletin: Multiple vulnerabilities in usage of IBM Java SDK in IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition (CVE-2013-5802, CVE-2013-4002, CVE-2013-5825, CVE-2013-5372)

Summary Potential security vulnerabilities exist in the IBM Java SDK that is shipped with the IBM Content Analytics with Enterprise Search and IBM OmniFind Enterprise Edition products. Vulnerability Details CVE ID: CVE-2013-5802 DESCRIPTION: JRE vulnerable to denial of service attacks via malform...

7.5CVSS0.7AI score0.24738EPSS

Exploits0Affected Software2