IBM AIX 7.2

🟡 Medium   ⏱ 15–45 min  Last verified: 9 May 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2019-4102, IBM Support Bulletin CVE: CVE-2019-4102 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.0 uses weaker than expected cryptographic algorithms that could […]

🟡 Medium   ⏱ 15–45 min  Last verified: 2 May 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2018-20732, IBM PSIRT advisory page CVE: CVE-2018-20732 NVD summary: SAS Web Infrastructure Platform before 9.4M6 allows remote attackers to execute arbitrary code via a Java deserialization variant. References: www.securityfocus.com/bid/106648   support.sas.com/kb/63/391.html   […]

🟡 Medium   ⏱ 15–45 min  Last verified: 17 April 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2019-4738, IBM Support Bulletin CVE: CVE-2019-4738 NVD summary: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI […]

🟡 Medium   ⏱ 15–45 min  Last verified: 3 April 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2019-4741, IBM Support Bulletin CVE: CVE-2019-4741 NVD summary: IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the […]

🟡 Medium   ⏱ 15–45 min  Last verified: 2 April 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2019-4386, IBM Support Bulletin CVE: CVE-2019-4386 NVD summary: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1 could allow an authenticated user to execute a function that would cause […]

🟠 High   ⏱ 30–90 min  Last verified: 28 February 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2018-8049, IBM PSIRT advisory page CVE: CVE-2018-8049 NVD summary: The Stealth endpoint in Unisys Stealth SVG 2.8.x, 3.0.x before 3.0.1999, 3.1.x, 3.2.x before 3.2.030, and 3.3.x before 3.3.016, when running on Linux […]

🟠 High   ⏱ 30–90 min  Last verified: 16 February 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2018-20733, IBM PSIRT advisory page CVE: CVE-2018-20733 NVD summary: BI Web Services in SAS Web Infrastructure Platform before 9.4M6 allows XXE. References: support.sas.com/kb/62/987.html   support.sas.com/kb/62/987.html Table of contents Symptom & Impact Environment […]

🟡 Medium   ⏱ 15–45 min  Last verified: 26 January 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2019-14678, IBM PSIRT advisory page CVE: CVE-2019-14678 NVD summary: SAS XML Mapper 9.45 has an XML External Entity (XXE) vulnerability that can be leveraged by malicious attackers in multiple ways. Examples are […]

🟡 Medium   ⏱ 15–45 min  Last verified: 3 January 2019 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2018-1751, IBM Support Bulletin CVE: CVE-2018-1751 NVD summary: IBM Security Key Lifecycle Manager 3.0 through 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. […]

🟠 High   ⏱ 30–90 min  Last verified: 28 August 2018 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2018-1845, IBM Support Bulletin CVE: CVE-2018-1845 NVD summary: IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote […]