IBM AIX 7.1

🟡 Medium   ⏱ 15–45 min  Last verified: 15 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-35642, IBM Support Bulletin CVE: CVE-2022-35642 NVD summary: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]

🟠 High   ⏱ 30–90 min  Last verified: 14 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-38890, IBM Support Bulletin CVE: CVE-2021-38890 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account […]

🟡 Medium   ⏱ 15–45 min  Last verified: 13 July 2022 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read  •  Source: NVD CVE-2021-29727, IBM Support Bulletin CVE: CVE-2021-29727 NVD summary: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to […]

🟡 Medium   ⏱ 15–45 min  Last verified: 12 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-29841, IBM Support Bulletin CVE: CVE-2021-29841 NVD summary: IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]

🟠 High   ⏱ 30–90 min  Last verified: 10 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-22454, IBM Support Bulletin CVE: CVE-2022-22454 NVD summary: IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. […]

🟡 Medium   ⏱ 15–45 min  Last verified: 8 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-43917, IBM Support Bulletin CVE: CVE-2022-43917 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. […]

🟡 Medium   ⏱ 15–45 min  Last verified: 5 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-22477, IBM Support Bulletin CVE: CVE-2022-22477 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]

🟡 Medium   ⏱ 15–45 min  Last verified: 5 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2021-39087, IBM Support Bulletin CVE: CVE-2021-39087 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow an authenticated user to obtain sensitive […]

🟡 Medium   ⏱ 15–45 min  Last verified: 5 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-40752, IBM Support Bulletin CVE: CVE-2022-40752 NVD summary: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID:  236687. References: exchange.xforce.ibmcloud.com/vulnerabilities/236 […]

🟡 Medium   ⏱ 15–45 min  Last verified: 2 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2022-22483, IBM Support Bulletin CVE: CVE-2022-22483 NVD summary: IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to […]