🟡 Medium ⏱ 15–45 min Last verified: 31 January 2025 Affected versions: IBM AIX 7.2 Affected: 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2025-36251, IBM Support Bulletin CVE: CVE-2025-36251 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to […]
🟡 Medium ⏱ 15–45 min Last verified: 31 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2025-14790, IBM Support Bulletin CVE: CVE-2025-14790 NVD summary: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials. References: www.ibm.com/support/pages/node/7266688 Table of […]
🟡 Medium ⏱ 15–45 min Last verified: 30 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-52363, IBM Support Bulletin CVE: CVE-2024-52363 NVD summary: IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL […]
🟡 Medium ⏱ 15–45 min Last verified: 27 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-22351, IBM Support Bulletin CVE: CVE-2024-22351 NVD summary: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. […]
🟢 Low ⏱ 10–30 min Last verified: 26 January 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2025-14808, IBM Support Bulletin CVE: CVE-2025-14808 NVD summary: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method […]
🟡 Medium ⏱ 15–45 min Last verified: 24 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2025-14915, IBM Support Bulletin CVE: CVE-2025-14915 NVD summary: IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain […]
🟡 Medium ⏱ 15–45 min Last verified: 23 January 2025 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2025-33142, IBM Support Bulletin CVE: CVE-2025-33142 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security for TLS connections. References: www.ibm.com/support/pages/node/7242172 Table of contents Symptom & Impact […]
🟡 Medium ⏱ 15–45 min Last verified: 4 January 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2024-56341, IBM Support Bulletin CVE: CVE-2024-56341 NVD summary: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in […]
🟡 Medium ⏱ 15–45 min Last verified: 3 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-45072, IBM Support Bulletin CVE: CVE-2024-45072 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user […]
🟡 Medium ⏱ 15–45 min Last verified: 1 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2024-39745, IBM Support Bulletin CVE: CVE-2024-39745 NVD summary: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly […]
