🟠 High ⏱ 30–90 min Last verified: 12 November 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29678, IBM Support Bulletin CVE: CVE-2021-29678 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority […]
🟡 Medium ⏱ 15–45 min Last verified: 11 November 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38981, IBM Support Bulletin CVE: CVE-2021-38981 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error […]
🟠 High ⏱ 30–90 min Last verified: 11 November 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29825, IBM Support Bulletin CVE: CVE-2021-29825 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force […]
🟠 High ⏱ 30–90 min Last verified: 9 November 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-20354, IBM Support Bulletin CVE: CVE-2021-20354 NVD summary: IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request […]
🟡 Medium ⏱ 15–45 min Last verified: 7 November 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20483, IBM Support Bulletin CVE: CVE-2021-20483 NVD summary: IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit […]
🟡 Medium ⏱ 15–45 min Last verified: 28 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-20579, IBM Support Bulletin CVE: CVE-2021-20579 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user who can create […]
🟡 Medium ⏱ 15–45 min Last verified: 24 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-39035, IBM Support Bulletin CVE: CVE-2021-39035 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows […]
🟡 Medium ⏱ 15–45 min Last verified: 18 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29681, IBM Support Bulletin CVE: CVE-2021-29681 NVD summary: IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be […]
🟡 Medium ⏱ 15–45 min Last verified: 17 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-39048, IBM Support Bulletin CVE: CVE-2021-39048 NVD summary: IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could […]
🟠 High ⏱ 30–90 min Last verified: 13 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29737, IBM Support Bulletin CVE: CVE-2021-29737 NVD summary: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate. IBM X-Force […]
