CVE-2019-4634

CVE-2019-4634 affects IBM Security Secret Server (all versions). The IBM security bulletin and Symantec writeup describe information-disclosure vulnerabilities where an attacker could learn details about underlying technologies through headers and response data (e.g., X-Powered-By, X-ASPNET-VERSI...

CVE-2020-4844

CVE-2020-4844 is addressed in IBM Security Identity Governance and Intelligence (IGI) 5.2.6. The IBM Security Directory Integrator component used by IGI had hard coded credentials, which has been removed in the fix. Affected product: IBM Security Identity Governance and Intelligence, version 5.2....

CVE-2019-4168

CVE-2019-4168 Details (IBM UrbanCode Deploy) : IBM UrbanCode Deploy could allow an authenticated user to obtain sensitive information that could be used in further attacks against the system. Affected products/versions: all fixpacks of IBM UrbanCode Deploy 7.0–7.0.2.2 and IBM UrbanCode Deploy 6.2...

CVE-2020-4225

IBM Application Gateway (version 1.0) is affected by CVE-2020-4225 where the product does not properly validate tenant configuration, potentially allowing a local user to obtain highly sensitive information or perform unauthorized actions. Remediation guidance in the linked IBM Security Bulletin ...

CVE-2019-4490

CVE-2019-4490 concerns IBM UrbanCode Deploy (UCD). A security vulnerability allows maliciously crafted data in UCD to generate a malicious CSV download file when opened with certain third‑party tools. IBM’s bulletin notes affected products as UCD (all versions) with CVSS base score 7.8, and lists...

CVE-2018-1591

IBM Multi-Cloud Data Encryption (MDE) is affected by CVE-2018-1591 due to an application error that causes error messages to disclose sensitive information about the environment, users, or data. Affected versions are MDE 2.1 through 2.1.0.1. The remediation is to upgrade to MDE 2.1.0.2 (Multiplat...

CVE-2020-4538

CVE-2020-4538 affects IBM Security Identity Manager (ISIM) 6.0.0. The vulnerability arises from reuse of another user’s JSESSIONID, enabling a privileged local user to perform unauthorized actions. IBM's bulletin confirms the issue and assigns a CVSS Base score of 6.7. Remediation provided: upgra...

CVE-2019-4499

CVE-2019-4499 affects IBM Secure Gateway Client (versions 1.8.0.0–1.8.2.2). The vulnerability arises from hard-coded credentials used for inbound authentication or internal data encryption. IBM’s bulletin lists remediation by upgrading to Secure Gateway Client 1.8.3.0 (fixed version). No other ex...

CVE-2019-4498

CVE-2019-4498 affects IBM Secure Gateway Client versions 1.8.0.0–1.8.2.2. The vulnerability arises from weaker-than-expected cryptographic algorithms used by the Secure Gateway Service, which could allow decryption of highly sensitive information. Remediation: upgrade to Secure Gateway Client 1.8...

CVE-2019-4677

IBM Security Identity Manager is affected by CVE-2019-4677 due to a cross-site scripting vulnerability in the Web UI. The bulletin specifies IBM Security Identity Manager 6.0.0 as affected, with the fix available in version 6.0.0-ISS-SIM-FP0023. The vulnerability allows embedding arbitrary JavaSc...

CVE-2020-20440

IBM Security Bulletin indicates CVE-2020-20440 is a server-side request forgery vulnerability in IBM WebSphere Application Server when shipped with IBM Security Identity Manager (ISIM). Affected products: ISIM 6.0.0; WebSphere Application Server versions 7.0 and 8.5. Remediation: ISIM 6.0.0 with ...

CVE-2020-204480

CVE-2020-204480 is a Server-side Request Forgery (SSRF) vulnerability affecting IBM WebSphere Application Server when shipped with IBM Security Identity Manager (ISIM). Affected product: ISIM 6.0.0 with WAS 7.0 and 8.5. Remediation/fixes are described in IBM security bulletins; no workarounds are...

CVE-2020-29754

CVE-2020-29754 is a privilege escalation vulnerability in IBM WebSphere Application Server shipped with IBM Security Identity Manager (ISIM). Affected ISIM versions: 6.0.0 and 6.0.2. Affected WAS versions: WAS 7.0 and 8.5 for ISIM 6.0.0; WAS 9 for ISIM 6.0.2. Remediation/fixes are listed in the b...

CVE-2019-4643

Technical details for CVE-2019-4643 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-4575

CVE-2021-4575 is a cross-site scripting vulnerability affecting IBM WebSphere Application Server (WAS) ND traditional, as referenced in IBM security bulletins about WAS shipped with IBM Security Directory Server. The connected IBM bulletin indicates affected WAS 8.5 and references the remediation...

CVE-2011-4065

Technical details for CVE-2011-4065 are not provided in the connected documents. The Initial Description indicates reservation with no public details. Monitor for updates.

CVE-2011-0068

CVE-2011-0068: The connected documentation details memory safety issues in Firefox’s WebGL/WebGLES components that could be exploited to run arbitrary code. Mozilla’s MFSA 2011-17 describes two crashes in WebGL/WebGLES that could be triggered to execute code, fixed in Firefox 4.0.1. OpenSUSE advi...

CVE-2108-6150

The connected Gentoo GLSA (GLSA-201808-01) confirms multiple vulnerabilities in Chromium and Google Chrome. A remote attacker could escalate privileges, trigger a heap buffer overflow, obtain sensitive information, or spoof a URL. The advisory provides remediation by upgrading to Chromium >= 6...

CVE-2020-19599

CVE-2020-19599 is covered within a Gentoo advisories set on Binutils: Multiple vulnerabilities. The connected Gentoo GLSA-202107-24 references CVE-2020-19599 among other CVEs and notes multipleBinutils vulnerabilities with no workaround availability. The Gentoo advisory recommends upgrading Binut...

CVE-2021-43656

CVE-2021-43656 is listed among multiple Thunderbird vulnerabilities in Ubuntu USN advisories USN-5246-1 / USN-5248-1. The Connected documents confirm Thunderbird is affected, but they do not provide any specific details about the root cause, impacted component/version, exact impact, exploit statu...