🟡 Medium ⏱ 15–45 min Last verified: 2 April 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-38337, IBM Support Bulletin CVE: CVE-2024-38337 NVD summary: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow an unauthorized attacker to retrieve or alter sensitive information contents due […]
🟡 Medium ⏱ 15–45 min Last verified: 1 April 2025 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2024-38320, IBM Support Bulletin CVE: CVE-2024-38320 NVD summary: IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that […]
🟡 Medium ⏱ 15–45 min Last verified: 1 April 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2025-14974, IBM Support Bulletin CVE: CVE-2025-14974 NVD summary: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable due to Insecure Direct Object Reference (IDOR). References: www.ibm.com/support/pages/node/7266723 Table of contents Symptom & Impact […]
🟡 Medium ⏱ 15–45 min Last verified: 31 March 2025 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2024-7577, IBM Support Bulletin CVE: CVE-2024-7577 NVD summary: IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product. References: www.ibm.com/support/pages/node/7185020 Table of contents […]
🟠 High ⏱ 30–90 min Last verified: 30 March 2025 Affected versions: IBM AIX 7.1 Affected: 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2025-36236, IBM Support Bulletin CVE: CVE-2025-36236 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could […]
🟡 Medium ⏱ 15–45 min Last verified: 29 March 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-45073, IBM Support Bulletin CVE: CVE-2024-45073 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 28 March 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-45071, IBM Support Bulletin CVE: CVE-2024-45071 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 27 March 2025 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2024-45071, IBM Support Bulletin CVE: CVE-2024-45071 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code […]
🟡 Medium ⏱ 15–45 min Last verified: 27 March 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2025-23227, IBM Support Bulletin CVE: CVE-2025-23227 NVD summary: IBM Tivoli Application Dependency Discovery Manager 7.3.0.0 through 7.3.0.11 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript […]
🟡 Medium ⏱ 15–45 min Last verified: 25 March 2025 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2025-27907, IBM Support Bulletin CVE: CVE-2025-27907 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests […]
