12960 matches found
Security Bulletin: A clickjacking vulnerability in WebSphere Application Server Liberty affects IBM InfoSphere Information Server
Summary A clickjacking vulnerability in WebSphere Application Server Liberty that is used by IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2021-39038 DESCRIPTION: IBM WebSphere Application Server 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through...
Security Bulletin: IBM InfoSphere Information Server is vulnerable to cross-site scripting (CVE-2022-40748)
Summary IBM InfoSphere Information Server is vulnerable to cross-site scripting. Vulnerability Details CVEID:CVE-2022-40748 DESCRIPTION: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...
CVE-2022-38388
IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968...
Improper access control
IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968...
CVE-2022-38388
IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968...
CVE-2022-34334
IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704...
CVE-2022-34334
Summary: IBM Sterling Partner Engagement Manager (version 2.0) is affected by an authentication/ session management vulnerability that allows an authenticated user to impersonate another user after logout. The issue arises from not invalidating the session, enabling session reuse. Affected produc...
CVE-2022-34334
IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704...
CVE-2022-30613
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366...
CVE-2022-41291
IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699...
CVE-2022-22493
IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449...
CVE-2022-22480
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...
Information disclosure
IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889...
Cross site request forgery (csrf)
IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449...
Code injection
IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366...
CVE-2022-41291
CVE-2022-41291 affects IBM InfoSphere Information Server 11.7. The issue is a session management flaw: the application does not invalidate a user’s session after logout, enabling an authenticated user to impersonate another user. Affected product/version: InfoSphere Information Server 11.7 (and I...
CVE-2022-34308
The CVE-2022-34308 entry relates to IBM CICS TX 11.1 and describes a local user denial-of-service due to improper load handling. Connected IBM security bulletins confirm affected products and versions: IBM CICS TX Standard and IBM CICS TX Advanced both list 11.1 as affected, with remediation stat...
CVE-2022-34308
IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437...
CVE-2022-30613
CVE-2022-30613 — IBM QRadar SIEM is affected in versions 7.4 (7.4.0–7.4.3 Fix Pack 6) and 7.5 (7.5.0–7.5.0 Update Pack 2). The issue allows disclosure of sensitive information via a local service to a privileged user (confidentiality impact = HIGH). The IBM Security Bulletin confirms the descript...