🟠 High ⏱ 30–90 min Last verified: 12 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29754, IBM Support Bulletin CVE: CVE-2021-29754 NVD summary: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association […]
🟠 High ⏱ 30–90 min Last verified: 12 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29825, IBM Support Bulletin CVE: CVE-2021-29825 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACKUP. IBM X-Force […]
🟡 Medium ⏱ 15–45 min Last verified: 8 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38926, IBM Support Bulletin CVE: CVE-2021-38926 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain […]
🟡 Medium ⏱ 15–45 min Last verified: 7 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39086, IBM Support Bulletin CVE: CVE-2021-39086 NVD summary: IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a remote attacker to obtain sensitive information when […]
🟡 Medium ⏱ 15–45 min Last verified: 5 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38975, IBM Support Bulletin CVE: CVE-2021-38975 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted […]
🟡 Medium ⏱ 15–45 min Last verified: 3 October 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29738, IBM Support Bulletin CVE: CVE-2021-29738 NVD summary: IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker […]
🟡 Medium ⏱ 15–45 min Last verified: 1 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38877, IBM Support Bulletin CVE: CVE-2021-38877 NVD summary: IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]
🟡 Medium ⏱ 15–45 min Last verified: 1 October 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29905, IBM Support Bulletin CVE: CVE-2021-29905 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 28 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29777, IBM Support Bulletin CVE: CVE-2021-29777 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5, under specific circumstance of a table being […]
🟡 Medium ⏱ 15–45 min Last verified: 28 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39035, IBM Support Bulletin CVE: CVE-2021-39035 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows […]
