CVE-2020-4588

IBM i2 iBase 8.9.13 is vulnerable to unrestricted file upload, allowing uploaded executables to be run, potentially causing code execution on a victim. IBM’s Security Bulletin confirms the fix in iBase 9 and advises upgrading to a version that includes the fix. Affected product/version: IBM i2 iB...

CVE-2021-29868

IBM i2 iBase versions 8.9.13 and 9.0.0 have an information disclosure vulnerability caused by insufficient session expiration. A local attacker could obtain sensitive information due to session handling, as described in IBM’s security bulletin and CNVD/NVD entries. Remediation: upgrade to IBM i2 ...

CVE-2020-4623

IBM i2 iBase 8.9.13 is affected by CVE-2020-4623 due to a DLL search order hijacking flaw that could allow a local authenticated attacker to execute arbitrary code. The issue is described across multiple sources (NVD entry and IBM Security Bulletin), identifying the affected product as IBM i2 iBa...

CVE-2020-4584

The CVE-2020-4584 issue affects IBM i2 iBase 8.9.13. A remote attacker could obtain sensitive information via a detailed technical error message returned in the browser, enabling information disclosure that could be used for further attacks. The underlying cause is that detailed error messages ar...