🟡 Medium ⏱ 15–45 min Last verified: 5 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-20549, IBM Support Bulletin CVE: CVE-2021-20549 NVD summary: IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering […]
🟠 High ⏱ 30–90 min Last verified: 5 September 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29725, IBM Support Bulletin CVE: CVE-2021-29725 NVD summary: IBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consume resources causing […]
🟠 High ⏱ 30–90 min Last verified: 1 September 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38891, IBM Support Bulletin CVE: CVE-2021-38891 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. […]
🟡 Medium ⏱ 15–45 min Last verified: 29 August 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38982, IBM Support Bulletin CVE: CVE-2021-38982 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 24 August 2021 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2021-29860, IBM Support Bulletin CVE: CVE-2021-29860 NVD summary: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library […]
🟠 High ⏱ 30–90 min Last verified: 23 August 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-29703, IBM Support Bulletin CVE: CVE-2021-29703 NVD summary: Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when executing […]
🟡 Medium ⏱ 15–45 min Last verified: 18 August 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-29763, IBM Support Bulletin CVE: CVE-2021-29763 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to […]
🟡 Medium ⏱ 15–45 min Last verified: 17 August 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-38926, IBM Support Bulletin CVE: CVE-2021-38926 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain […]
🟡 Medium ⏱ 15–45 min Last verified: 15 August 2021 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2021-20515, IBM Support Bulletin CVE: CVE-2021-20515 NVD summary: IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow […]
🟡 Medium ⏱ 15–45 min Last verified: 15 August 2021 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2021-38977, IBM Support Bulletin CVE: CVE-2021-38977 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may […]
