Security Bulletin: IBM OpenPages GRC Platform Information disclosure (CVE-2016-3050)

Summary IBM OpenPages GRC Platform has a potential security exposure due to an Information disclosure vulnerability. Vulnerability Details CVEID: CVE-2016-3050 DESCRIPTION: IBM OpenPages GRC Platform could disclose sensitive information to an authenticated user through error logs. CVSS Base Score...

Security Bulletin: IBM OpenPages GRC Platform is affected by multiple XSS reflection vulnerabilities (CVE-2017-1147, CVE-2016-3048)

Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple XSS reflection vulnerabilities. Vulnerability Details CVEID: CVE-2017-1147 DESCRIPTION: IBM OpenPages GRC Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...

Security Bulletin: DataPower GUI vulnerable to XML External Entity Injection attack (CVE-2018-1421)

Summary DataPower GUI is vulnerable to an XML External Entity Injection attack from a low-privileged DataPower account. IBM has addressed the applicable CVE Vulnerability Details CVEID: CVE-2018-1421 DESCRIPTION: IBM DataPower Gateways is vulnerable to a XML External Entity Injection XXE attack...

Security Bulletin: Vulnerability in OpenSSL affects IBM DataPower Gateways (CVE-2017-3735)

Summary A potential vulnerability has been reported by the OpenSSL project. IBM DataPower Gateways has addressed the applicable CVE. Vulnerability Details Relevant CVE Information: CVEID: CVE-2017-3735 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a...

CVE-2017-8954

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8957

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5804

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5806

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5795

A Local Arbitrary File Download vulnerability in HPE Intelligent Management Center IMC version PLAT 7.2 E0403P06 was found...

CVE-2017-5790

A remote deserialization of untrusted data vulnerability in HPE Intelligent Management Center IMC PLAT version 7.2 E0403P06 was found...

CVE-2016-8525

A Remote Disclosure of Information vulnerability in HPE iMC PLAT version v7.2 E0403P06 and earlier was found. The problem was resolved in iMC PLAT 7.3 E0504 or subsequent version...

Remote code execution

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-8957

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

CVE-2017-5804

A Remote Code Execution vulnerability in HPE Intelligent Management Center iMC PLAT version 7.2 was found...

VMware vRealize Automation Deserialization Vulnerability (VMSA-2018-0006)

The VMware vRealize Automation application running on the remote host is version 7.2 or 7.3 and is missing security patches indicated in the vendor advisory. It is, therefore, affected by a deserialization vulnerability. TRUSTED...

IBM QRadar Cross-Site Scripting Vulnerability (CNVD-2018-01026)

IBM QRadar is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. A cross-site scripting...

Security Update for Citrix XenServer

Description of Problem A security issue has been identified within Citrix XenServer that may allow the malicious administrator of a guest VM to cause the host to crash. This issue affects Citrix XenServer 7.2 and Citrix XenServer 7.1 LTSR CU1. A CVE identifier is not presently available for this...

Citrix XenServer Multiple Security Updates (CTX230138)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of an HVM guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

CVE-2016-3048

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

IBM QRadar SIEM and QRadar Incident Forensics Input Validation Vulnerabilities

IBM QRadar SIEM and QRadar Incident Forensics are both products of IBM USA. The former is a suite of solutions that utilize security intelligence to protect assets and information from advanced threats; the latter is a suite of security forensic investigation software. An input validation...