CVE-2024-25048

IBM CVE-2024-25048 affects IBM MQ Appliance 9.3 CD and LTS, where a heap-based buffer overflow results from improper bounds checking when handling malformed requests. The vulnerability can allow a remote authenticated attacker to overflow memory, potentially executing arbitrary code or causing th...

CVE-2024-25048 IBM MQ code execution

IBM MQ Appliance 9.3 CD and LTS are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. IBM X-Force ID: 283137...

CVE-2024-25026

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

CVE-2024-25026 IBM WebSphere Application Server denial of service

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

CVE-2024-25026 IBM WebSphere Application Server denial of service

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...

CVE-2024-25026

CVE-2024-25026 is described in IBM advisories as affecting IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4, with a denial-of-service impact caused by a specially crafted request that can exhaust memory resources on the server. Publi...

CVE-2023-47731 IBM QRadar Suite Software cross-site scripting

IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

CVE-2023-47731

IBM QRadar Suite Software (1.10.12.0–1.10.19.0) and IBM Cloud Pak for Security (1.10.0.0–1.10.11.0) are affected by a stored cross-site scripting flaw in the Web UI. The issue allows embedding arbitrary JavaScript, potentially leading to credentials disclosure within a trusted session. Remediatio...

CVE-2023-47731 IBM QRadar Suite Software cross-site scripting

IBM QRadar Suite Software 1.10.12.0 through 1.10.19.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...

CVE-2022-40745

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452...

CVE-2023-37397

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...

CVE-2022-40745 IBM Aspera Faspex information disclosure

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452...

CVE-2022-40745 IBM Aspera Faspex information disclosure

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain sensitive information due to weaker than expected security. IBM X-Force ID: 236452...

CVE-2022-40745

CVE-2022-40745 : IBM Aspera Faspex 5.0.0–5.0.7 has an information disclosure vulnerability caused by weaker than expected security, exploitable by a local user to obtain sensitive information. The IBM Security Bulletin confirms remediation by upgrading to Faspex 5.0.8, addressing multiple encrypt...

CVE-2023-37397 IBM Aspera Faspex data manipulation

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...

CVE-2023-37397 IBM Aspera Faspex data manipulation

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a local user to obtain or modify sensitive information due to improper encryption of certain data. IBM X-Force ID: 259672...

CVE-2023-37397

IBM Aspera Faspex versions 5.0.0–5.0.7 have a trust/encryption issue where data is improperly encrypted, allowing a local user to obtain or modify sensitive information. This vulnerability is documented across multiple sources (IBM bulletin, NVD, CNVD/CNNVD) with the affected product/version rang...

CVE-2023-27279 IBM Aspera Faspex denial of service

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533...

CVE-2023-27279 IBM Aspera Faspex denial of service

IBM Aspera Faspex 5.0.0 through 5.0.7 could allow a user to cause a denial of service due to missing API rate limiting. IBM X-Force ID: 248533...

CVE-2023-27279

The vulnerability CVE-2023-27279 affects IBM Aspera Faspex 5.0.0–5.0.7 and is caused by missing API rate limiting, enabling denial of service. Remediation is to upgrade to Faspex 5.0.8 (IBM advisory notes this fix). Impact is rated MEDIUM (CVSS 3.1 base score 6.5); no exploitation details are pro...