🟡 Medium ⏱ 15–45 min Last verified: 26 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38948, IBM Support Bulletin CVE: CVE-2021-38948 NVD summary: IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit […]
🟡 Medium ⏱ 15–45 min Last verified: 25 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29827, IBM Support Bulletin CVE: CVE-2021-29827 NVD summary: IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit […]
🟡 Medium ⏱ 15–45 min Last verified: 24 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29812, IBM Support Bulletin CVE: CVE-2021-29812 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
🟠 High ⏱ 30–90 min Last verified: 23 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29691, IBM Support Bulletin CVE: CVE-2021-29691 NVD summary: IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound […]
🟠 High ⏱ 30–90 min Last verified: 23 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39002, IBM Support Bulletin CVE: CVE-2021-39002 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that […]
🟡 Medium ⏱ 15–45 min Last verified: 19 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39048, IBM Support Bulletin CVE: CVE-2021-39048 NVD summary: IBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local attacker could […]
🟡 Medium ⏱ 15–45 min Last verified: 18 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-39087, IBM Support Bulletin CVE: CVE-2021-39087 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive […]
🟡 Medium ⏱ 15–45 min Last verified: 11 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38975, IBM Support Bulletin CVE: CVE-2021-38975 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted […]
🟡 Medium ⏱ 15–45 min Last verified: 8 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-20448, IBM Support Bulletin CVE: CVE-2021-20448 NVD summary: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering […]
🟡 Medium ⏱ 15–45 min Last verified: 7 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29810, IBM Support Bulletin CVE: CVE-2021-29810 NVD summary: IBM Jazz for Service Management 1.1.3.10 and IBM Tivoli Netcool/OMNIbus_GUI is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript […]
