Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Algorithmics One Core, Algo Risk Application, and Counterparty Credit Risk

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition, Versions 6 Service Refresh 16 Fix Pack 5 and earlier and 7 Service Refresh 9 Fix Pack 1 and earlier that is used by IBM Algo One Core, Algo Risk Application, and Counterparty Credit Risk. Vulnerabilit...

CVE-2016-0207

IBM Algorithmics One-Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to conduct clickjacking attacks via unspecified vectors. IBM X-Force ID: 109399...

CVE-2016-0207

Affected product: IBM Algorithmics One-Algo Risk Application (ARA) versions 4.9.1–5.1.0. Vulnerability: remote authenticated users could perform clickjacking by sending specially crafted HTTP requests, effectively hijacking the victim’s click actions. Impact: enables manipulation of user interact...

CVE-2017-1154

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

Code injection

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

CVE-2017-1154

IBM Algo One - Algo Risk Application (ARA) versions 4.9.1, 5.0, and 5.1.0 contain a vulnerability that could allow a user to access files in the local environment that should not be viewable by application users. The IBM security bulletin for CVE-2017-1154 notes this as a file-access issue and li...

CVE-2017-1154

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference : 1999892...

IBM Algo One - Algo Risk Application Unauthorized Access Vulnerability

IBM Algo One is a suite of solutions from IBM that helps financial institutions and corporate treasury departments develop risk-awareness solutions.The Algo Risk Application ARA is an integrated set of decision-support tools that provides real-time portfolio analytics for risk managers, portfolio...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

Design/Logic Flaw

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference : 1999754...

CVE-2017-1155

IBM Algorithmics One-Algo Risk Application (ARA) versions 4.9.1, 5.0, and 5.1.0 are affected by CVE-2017-1155, which could allow a user to access another user’s reports via a specially crafted HTTP request. Impact: unauthorized access to reports; CVSS v3 base score 4.3 (Network/Low complexity, Pr...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Algorithmics Algo One Algo Risk Application ARA 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0390

IBM Algo One - Algo Risk Application (ARA) versions 4.9.1 through 5.1.0 are affected by CVE-2016-0390, a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. A remote attacker could exploit this via a specially crafted URL to execute script in a victim’s ...

IBM Algorithmics Algo Risk Application Cross-Site Scripting Vulnerability

IBM Algorithmics is a set of solutions from IBM in the United States that can help financial institutions and corporate finance departments to develop risk foresight. A cross-site scripting vulnerability exists in IBM Algorithmics Algo Risk Application versions 4.9.1 through 5.1.0. A remote...

IBM Algorithmics Algo Risk Application Clickjacking Vulnerability

IBM Algorithmics is a suite of solutions that help financial institutions and corporate treasury departments develop risk profiles, and the Algo Risk Application is one of the integrated set of decision support tools. A clickjacking vulnerability exists in IBM Algorithmics Algo Risk Application,...

CVE-2013-6304

Multiple directory traversal vulnerabilities in Algo Risk Application ARA 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a 1 configuration or 2 JAR file...

Directory traversal

Multiple directory traversal vulnerabilities in Algo Risk Application ARA 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a 1 configuration or 2 JAR file...

CVE-2013-6304

CVE-2013-6304 affects IBM Algo One’s Algo Risk Application (ARA) 2.x and 4.x (2.4.0.1–4.9.1). The vulnerability is a directory traversal flaw allowing remote authenticated users to bypass access restrictions by submitting crafted pathnames for (1) a configuration file or (2) a JAR file. Impact de...

CVE-2013-6304

Multiple directory traversal vulnerabilities in Algo Risk Application ARA 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a 1 configuration or 2 JAR file...