Security Bulletin: IBM Network Performance Insight 1.3.1 affected by Eclipse Jetty vulnerability (CVE-2020-27216)

Summary IBM Network Performance Insight1.3.1 affected by Eclipse Jetty vulnerability CVE-2020-27216 Vulnerability Details CVEID: CVE-2020-27216 DESCRIPTION: Eclipse Jetty could allow a local authenticated attacker to gain elevated privileges on the system, caused by a race condition in the creati...

Security Bulletin: IBM Network Performance Insight is affected by Apache Commons Codec vulnerability

Summary Security Bulletin: IBM Network Performance Insight is affected by Apache Commons Codec vulnerability. This vulnerability is resolved by updating the third party Apache Commons Codec in following hotfix. Vulnerability Details Third Party Entry: 177835 DESCRIPTION: Apache Commons Codec...

Security Bulletin: Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14195

Summary Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14195 Vulnerability Details CVEID: CVE-2020-14195 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe...

Security Bulletin: Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062

Summary Netcool Operations Insight component IBM Network Performance Insight 1.3.1 affected by CVE-2020-14062 Vulnerability Details CVEID: CVE-2020-14062 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe...

Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight (CVE-2020-8840)

Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight CVE-2020-8840 Vulnerability Details CVEID: CVE-2020-8840 DESCRIPTION: An unspecified error with the lack of certain xbean-reflect/JNDI blocking in FasterXML jackson-databind has an unknown impact and...

Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight (CVE-2019-14892, CVE-2019-14893)

Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight CVE-2019-14892, CVE-2019-14893 Vulnerability Details CVEID: CVE-2019-14892 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by an...

Security Bulletin: jackson-databind (Publicly disclosed vulnerability) found in Network Performance Insight

Summary jackson-databind Publicly disclosed vulnerability found in Network Performance Insight Vulnerability Details CVEID: CVE-2020-9547 DESCRIPTION: FasterXML jackson-databind could allow a remote attacker to execute arbitrary code on the system, caused by the mishandling of interaction between...

Security Bulletin: Apache Log4j valunarability found in Network Performance Insight (CVE-2019-17571)

Summary Apache Log4j vulnerability found in Network Performance Insight CVE-2019-17571. Vulnerability Details CVEID: CVE-2019-17571 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrary code on the system, caused by improper deserialization of untrusted data in SocketServer...

Security Bulletin: The vanruability (net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact) found Network Performance Insight (CVE-2019-17571)

Summary The vanruability net.sf.ehcache blocking in FasterXML jackson-databind has an unknown impact found Network Performance Insight CVE-2019-17571 Vulnerability Details CVEID: CVE-2019-20330 DESCRIPTION: A lacking of certain net.sf.ehcache blocking in FasterXML jackson-databind has an unknown...

Security Bulletin: Vulnerability affecting IBM Network Performance Insight (CVE-2019-12402)

Summary IBM Network Performance Insight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-12402 DESCRIPTION: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This...

Security Bulletin: Vulnerability affecting IBM Network Performance Insight (CVE-2019-16335)

Summary IBM Network Performance Insight has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2019-16335 DESCRIPTION: A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different...

Security Bulletin: Vulnerabilities affect IBM Network Performance Insight (CVE-2019-14379, CVE-2019-17531, CVE-2019-14439 and CVE-2019-14540)

Summary IBM Network Performance Insight has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-14379 DESCRIPTION: SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used because of...

Security Bulletin: IBM Network Performance Insight (CVE-2019-10241, CVE-2019-10247)

Summary Fix for CVE-2019-10241 and CVE-2019-10247. Vulnerability Details CVEID: CVE-2019-10241 DESCRIPTION: Eclipse Jetty is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the DefaultServlet and ResourceHandler. A remote attacker could exploit this...

Security Bulletin: Vulnerability in IBM Java Runtime affects IBM Network Performance Insight

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version IBM JRE 8.0.5.27 that is used by IBM® Network Performance Insight. IBM® Network Performance Insight has addressed the applicable CVE. Vulnerability Details If you run your own Java code by using the IBM Java Runtime that i...

Security Bulletin: IBM Network Performance Insight (CVE-2018-11771)

Summary Apache Commons Compress is vulnerable to a denial of service, caused by the failure to return the correct EOF indication after the end of the stream has been reached by the ZipArchiveInputStream method. By reading a specially crafted ZIP archive, a remote attacker could exploit this...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Network Performance Insight

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version IBM JRE 8.0.2.10 used by IBM Network Performance Insight. IBM Network Performance Insight has addressed the applicable CVEs. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivere...

HP OpenView Performance Insight Server Backdoor Account Code Execution

No description provided by source. $Id: hpopenviewinsightbackdoor.rb 11969 2011-03-15 21:56:11Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing...

CVE-2012-3269

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3270...

CVE-2012-3270

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...

Design/Logic Flaw

Unspecified vulnerability in HP Performance Insight 5.31, 5.40, and 5.41, when Sybase is used, allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors, a different vulnerability than CVE-2012-3269...