IBM AIX 7.2

🟡 Medium   ⏱ 15–45 min  Last verified: 5 February 2025 Affected versions: IBM AIX 7.2 Affected: 7.2, 7.3 📖 ~4 min read  •  Source: NVD CVE-2025-36250, IBM Support Bulletin CVE: CVE-2025-36250 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could […]

🟡 Medium   ⏱ 15–45 min  Last verified: 31 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2025-33104, IBM Support Bulletin CVE: CVE-2025-33104 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]

🟡 Medium   ⏱ 15–45 min  Last verified: 31 January 2025 Affected versions: IBM AIX 7.2 Affected: 7.2, 7.3 📖 ~4 min read  •  Source: NVD CVE-2025-36251, IBM Support Bulletin CVE: CVE-2025-36251 NVD summary: IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 nimsh service SSL/TLS implementations could allow a remote attacker to […]

🟡 Medium   ⏱ 15–45 min  Last verified: 31 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2025-14790, IBM Support Bulletin CVE: CVE-2025-14790 NVD summary: IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials. References: www.ibm.com/support/pages/node/7266688 Table of […]

🟡 Medium   ⏱ 15–45 min  Last verified: 30 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2024-52363, IBM Support Bulletin CVE: CVE-2024-52363 NVD summary: IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL […]

🟡 Medium   ⏱ 15–45 min  Last verified: 27 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2024-22351, IBM Support Bulletin CVE: CVE-2024-22351 NVD summary: IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. […]

🟡 Medium   ⏱ 15–45 min  Last verified: 24 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2025-14915, IBM Support Bulletin CVE: CVE-2025-14915 NVD summary: IBM WebSphere Application Server – Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain […]

🟡 Medium   ⏱ 15–45 min  Last verified: 3 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2024-45072, IBM Support Bulletin CVE: CVE-2024-45072 NVD summary: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user […]

🟡 Medium   ⏱ 15–45 min  Last verified: 1 January 2025 Affected versions: IBM AIX 7.2 📖 ~4 min read  •  Source: NVD CVE-2024-39745, IBM Support Bulletin CVE: CVE-2024-39745 NVD summary: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly […]

🟠 High   ⏱ 30–90 min  Last verified: 21 December 2024 Affected versions: IBM AIX 7.2 Affected: 7.2, 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-27273, IBM Support Bulletin CVE: CVE-2024-27273 NVD summary: IBM AIX's Unix domain (AIX 7.2, 7.3, VIOS 3.1, and VIOS 4.1) datagram socket implementation could potentially expose applications using Unix […]