IBM AIX 7.1

🟡 Medium   ⏱ 15–45 min  Last verified: 7 March 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2024-38320, IBM Support Bulletin CVE: CVE-2024-38320 NVD summary: IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client 8.1.0.0 through 8.1.23.0 uses weaker than expected cryptographic algorithms that […]

🟡 Medium   ⏱ 15–45 min  Last verified: 28 February 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2025-36002, IBM Support Bulletin CVE: CVE-2025-36002 NVD summary: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user credentials in configuration […]

🟡 Medium   ⏱ 15–45 min  Last verified: 24 February 2025 Affected versions: IBM AIX 7.1 Affected: 7.2, 7.3 📖 ~4 min read  •  Source: NVD CVE-2025-36250, IBM Support Bulletin CVE: CVE-2025-36250 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could […]

🟡 Medium   ⏱ 15–45 min  Last verified: 23 February 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2025-27907, IBM Support Bulletin CVE: CVE-2025-27907 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests […]

🟠 High   ⏱ 30–90 min  Last verified: 21 February 2025 Affected versions: IBM AIX 7.1 Affected: 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-25021, IBM Support Bulletin CVE: CVE-2024-25021 NVD summary: IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM […]

🟡 Medium   ⏱ 15–45 min  Last verified: 4 February 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2024-39744, IBM Support Bulletin CVE: CVE-2024-39744 NVD summary: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious […]

🟢 Low   ⏱ 10–30 min  Last verified: 26 January 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2025-14808, IBM Support Bulletin CVE: CVE-2025-14808 NVD summary: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method […]

🟡 Medium   ⏱ 15–45 min  Last verified: 4 January 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2024-56341, IBM Support Bulletin CVE: CVE-2024-56341 NVD summary: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in […]

🟡 Medium   ⏱ 15–45 min  Last verified: 1 January 2025 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2024-49808, IBM Support Bulletin CVE: CVE-2024-49808 NVD summary: IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper […]

🟡 Medium   ⏱ 15–45 min  Last verified: 29 December 2024 Affected versions: IBM AIX 7.1 📖 ~4 min read  •  Source: NVD CVE-2024-31914, IBM Support Bulletin CVE: CVE-2024-31914 NVD summary: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to […]