Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1643)

Summary WebSphere Application Server is shipped as a component of IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the...

Security Bulletin: IBM DataPower Gateway is affected by a script injection vulnerability (CVE-2018-1667)

Summary IBM DataPower Gateway has addressed the following vulnerability: CVE-2018-1667 Vulnerability Details CVEID: CVE-2018-1667 DESCRIPTION: IBM WebSphere DataPower Appliances is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise (CVE-2018-1793)

Summary Websphere Application Server is shipped as a component of IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. Information about a security vulnerability affecting Websphere Application Server has been published in a security bulletin. Vulnerability Details Please consult the...

Script injection of certain symbols bypass portal UI restrictions in Update Rollup 13 for Windows Azure Pack

None None...

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows 7 SP1 and Server 2008 R2 SP1 (KB 4470641)

Description of the Security and Quality Rollup for .NET Framework 3.5 for Windows 7 SP1 and Server 2008 R2 SP1 KB 4470641 Applies to: Microsoft .NET Framework 3.5 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when Microsof...

Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: December 11, 2018

None None...

Description of the security update for Outlook 2010: December 11, 2018

Description of the security update for Outlook 2010: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...

Description of the security update for SharePoint Enterprise Server 2016: February 13, 2018

None None...

Description of the security update for SharePoint Foundation 2010: December 11, 2018

Description of the security update for SharePoint Foundation 2010: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows Server 2008 SP2 (KB 4470633)

Description of the Security Only update for .NET Framework 3.5 SP1 for Windows Server 2008 SP2 KB 4470633 Applies to: Microsoft .NET Framework 3.5 Service Pack 1 Summary This security update resolves a vulnerability in Microsoft .NET Framework that could allow remote code execution when Microsoft...

Description of the security update for SharePoint Server 2010: December 11, 2018

Description of the security update for SharePoint Server 2010: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018

Description of the security update for SharePoint Server 2010 Office Web Apps: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...

Description of the security update for SharePoint Foundation 2013: December 11, 2018

Description of the security update for SharePoint Foundation 2013: December 11, 2018 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft PowerPoint CVE-2018-8628 Remote Code Execution Vulnerability

Description Microsoft PowerPoint is prone to a remote code-execution vulnerability. An attacker can leverage this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial of service conditions. Technologies Affected...

KLA11883 ACE vulnerability in Microsoft Azure

A cross-site-scripting XSS vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2018-8652 Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2018-8652 warning KB list 4480788 Solution Install...

Microsoft Windows Azure Pack CVE-2018-8652 Cross Site Scripting Vulnerability

Description Microsoft Windows Azure Pack is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. Thi...

Security Bulletin: Potential cross-site request forgery in WebSphere Application Server Admin Console (CVE-2018-1926)

Summary There is a potential cross-site request forgery in WebSphere Application Server Admin Console CVE-2018-1926 Vulnerability Details CVEID: CVE-2018-1926 DESCRIPTION: IBM WebSphere Application Server Admin Console is vulnerable to cross-site request forgery, caused by improper validation of...

Security Bulletin: A vulnerability in IBM Java Runtime affect Rational Asset Analyzer (RAA).

Summary A vulnerability in IBM® Runtime Environment Java™ Version 8.0.5.15 used by Rational Asset Analyzer. Rational Asset Analyzer has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2018-3180 DESCRIPTION: An unspecified vulnerability in Oracle Java SE related to the Java SE, Java...

Security Bulletin: Rational Asset Analyzer (RAA) is affected by a WAS Liberty vulnerability.

Summary Rational Asset Analyzer has addressed the following vulnerability. IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information, caused by the failure to encrypt ORB communication. Vulnerability Details CVEID: CVE-2018-1683 DESCRIPTION: IBM...

Security Bulletin: Multiple Security Vulnerabilities exist in IBM Cognos Insight (CVE-2018-1656, CVE-2018-0732, CVE-2018-12539, )

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Cognos Insight. These issues were disclosed as part of the IBM Java SDK updates in July 2018. An Open Source OpenSSL vulnerability has also been addressed. Vulnerability Details If you run your own...