12960 matches found
CVE-2020-4164
IBM Security Information Queue ISIQ 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could expose sensitive information from applicatino errors which could be used in further attacks against the system. IBM X-Force ID: 174400...
CVE-2019-4740
IBM DOORS Next Generation (DNG/RRC) 6.0.2–6.0.6.1 (including 6.0.61) are affected by a cross-site scripting flaw in the Web UI that can allow embedding arbitrary JavaScript and potentially disclose credentials within a trusted session. Root cause is a Web UI XSS vulnerability; affected components...
CVE-2019-4740
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4746
CVE-2019-4746 affects IBM DOORS Next Generation (DNG/RRC) Web UI. According to the IBM bulletin, multiple cross-site scripting defects exist in DNG/RRC versions 6.0.2, 6.0.6, and 6.0.6.1 (and related RDNG/DNG variants), allowing an attacker to inject arbitrary JavaScript into the Web UI, potentia...
CVE-2019-4746
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4603
IBM Quality Manager (RQM) versions 6.02, 6.06 and 6.0.6.1 are affected: an authenticated user can create keywords via the REST API and have them appear as if created by another user. This CVE affects RQM’s REST API keyword handling and may enable impersonation of keyword creation. Remediation pro...
CVE-2019-4603
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them appear as if they were created by another user. IBM X-Force ID: 168295...
CVE-2019-4737
IBM DOORS Next Generation DNG/RRC 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
CVE-2019-4602
CVE-2019-4602 affects IBM Quality Manager (RQM) versions 6.02, 6.06, and 6.0.6.1. The vulnerability is a cross-site scripting flaw that enables embedding arbitrary JavaScript in the Web UI, which can alter functionality and potentially disclose credentials within a trusted session. The issue is d...
CVE-2019-4602
IBM Quality Manager RQM 6.02, 6.06, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...
CVE-2020-4273
CVE-2020-4273 affects IBM Spectrum Scale (GPFS) 4.2 and 5.0. A local unprivileged attacker with environmental knowledge could execute commands as root via specially crafted input. Reports in IBM bulletins confirm the vulnerability and provide remediation paths: update to IBM Spectrum Scale 5.x wi...
CVE-2020-4273
IBM Spectrum Scale 4.2 and 5.0 could allow a local unprivileged attacker with intimate knowledge of the enviornment to execute commands as root using specially crafted input. IBM X-Force ID: 175977...
CVE-2020-4303
IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2020-4325
The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the...
CVE-2020-4325
The IBM Process Federation Server 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, and 19.0.0.3 Global Teams REST API does not properly shutdown the thread pools that it creates to retrieve Global Teams information from the federated systems. As a consequence, the Java Virtual Machine can't recover the...
CVE-2020-4325
CVE-2020-4325 affects IBM Process Federation Server and IBM Automation Workstream Services in Cloud Pak for Automation. The root cause is improper shutdown of thread pools used to retrieve Global Teams information, causing JVM memory to be unrecoverable and leading to OutOfMemory errors when the ...
CVE-2020-4304
IBM WebSphere Application Server - Liberty 17.0.0.3 through 20.0.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...
CVE-2020-4304
Summary (CVE-2020-4304): IBM WebSphere Application Server Liberty components are affected by a cross-site scripting (XSS) vulnerability in the Web UI. Affects Liberty 17.0.0.3 through 20.0.0.3; exploitation could lead to credentials disclosure within a trusted session. The connected IBM bulletins...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the IBM Spectrum Protect Server on AIX (CVE-2019-4473, CVE-2019-11771)
Summary There are multiple vulnerabilities in IBM Runtime Environment Java which is used by the IBM Spectrum Protect formerly Tivoli Storage Manager Server on AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2019. UPDATED: 3/31/2020 with the 7.1 fix. Vulnerability...
CVE-2020-4242
IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM...