EUVD-2018-11978

Malware in sbrugna...

EUVD-2017-10225

Malware in sbrugna...

EUVD-2019-13867

Malware in sbrugna...

EUVD-2019-13853

Malware in sbrugna...

EUVD-2017-10226

Malware in sbrugna...

EUVD-2019-14063

Malware in sbrugna...

EUVD-2017-10227

Malware in sbrugna...

EUVD-2017-10228

Malware in sbrugna...

Security Bulletin: Daeja ViewONE may return unauthorised content

Summary An authenticated user of ViewONE may be able to access ViewONE cached content that they do not have repository authorisation to view. Vulnerability Details CVEID:CVE-2020-4720 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual could allow an authenticated user to obtain...

Security Bulletin: IBM Daeja ViewONE Virtual 5.0.14 iFix 5 addresses CVE-2017-9096

Summary IBM Daeja ViewONE Virtual 5.0.14 iFix 5 released on October 3, 2024 addresses the vulnerable library iText reported under CVE-2017-9096 by removing it. Vulnerability Details CVEID:CVE-2017-9096 DESCRIPTION: iText PDF Library could allow a remote authenticated attacker to obtain sensitive...

Security Bulletin: IBM Content Navigator is vulnerable to Cross Site Port Attack due to Daeja ViewONE (CVE-2024-31897)

Summary Daeja ViewOne Virtual is used by IBM Content Navigator as part of the document viewer. CVE-2024-31897 Vulnerability Details CVEID:CVE-2024-31897 DESCRIPTION: IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0....

Security Bulletin: IBM Content Navigator is vulnerable to a Code Inject Exploit due to Daeja ViewOne Virtual (CVE-2023-40684)

Summary Daeja ViewOne Virtual is used by IBM Content Navigator as part of the document viewer. CVE-2023-40684. Vulnerability Details CVEID:CVE-2023-40684 DESCRIPTION: IBM Content Navigator with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to emb...

CVE-2023-40684

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

Cross site scripting

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a...

CVE-2023-40684

CVE-2023-40684 affects IBM Content Navigator on 3.0.11/3.0.13/3.0.14 when used with IBM Daeja ViewOne Virtual. The issue is a cross-site scripting vulnerability that lets a user embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Docum...

Security Bulletin: Daeja ViewONE may be affected by Bouncy Castle Vulnerability (CVE-2023-33201)

Summary ViewONE has a bundled version of Bouncy Castle containing a known security issue. Vulnerability Details CVEID:CVE-2023-33201 DESCRIPTION: The Bouncy Castle Crypto Package For Java bc-java could allow a remote attacker to obtain sensitive information, caused by not validating the X.500 nam...

Security Bulletin: Daeja ViewONE Professional, Standard & Virtual does not have limits for large or slow workloads.

Summary ViewONE does not ensure that content is small enough before completing work, nor does it have timeouts for some processes. Vulnerability Details CVEID: CVE-2017-1212 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual is vulnerable to a denial of service when viewing or openin...

Security Bulletin: Daeja ViewONE Professional, Standard & Virtual components do not set a character set or nosniff headers

Summary Responses from ViewONE server-side components include a mime-type without a character set and no X-Content-Type-Options=nosniff header. Vulnerability Details CVEID: CVE-2017-1209 DESCRIPTION: IBM Daeja ViewONE Professional, Standard & Virtual is vulnerable to cross-site scripting. This...

Security Bulletin: Daeja ViewONE Virtual is affected by a Cross-Site Scripting vulnerability

Summary IBM Daeja ViewONE Virtual is vulnerable to Persistent Cross-site Scripting attack Vulnerability Details CVEID: CVE-2018-1399 DESCRIPTION: IBM Daeja ViewONE Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...

Security Bulletin: Daeja ViewONE Professional, Standard & Virtual is affected by a disclosing sensitive data when logging is enabled vulnerability

Summary Daeja ViewONE Professional, Standard & Virtual has addressed the following vulnerability. When logging is enabled in Daeja ViewONE, the user's current session ID can be written to log files or standard output. Vulnerability Details CVEID: CVE-2017-1211 DESCRIPTION: IBM Daeja ViewONE...