IBM AIX 7.3

🟡 Medium   ⏱ 15–45 min  Last verified: 7 April 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-47706, IBM Support Bulletin CVE: CVE-2023-47706 NVD summary: IBM Security Guardium Key Lifecycle Manager 4.3 could allow an authenticated user to upload files of a dangerous file type. IBM X-Force ID: 271341. […]

🟠 High   ⏱ 30–90 min  Last verified: 5 April 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-39747, IBM Support Bulletin CVE: CVE-2024-39747 NVD summary: IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality. References: exchange.xforce.ibmcloud.com/vulnerabilities/297   www.ibm.com/support/pages/node/7166947 Table of contents […]

🟡 Medium   ⏱ 15–45 min  Last verified: 2 April 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-27868, IBM Support Bulletin CVE: CVE-2023-27868 NVD summary: IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary […]

🟡 Medium   ⏱ 15–45 min  Last verified: 1 April 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-56341, IBM Support Bulletin CVE: CVE-2024-56341 NVD summary: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in […]

🟢 Low   ⏱ 10–30 min  Last verified: 29 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-41760, IBM Support Bulletin CVE: CVE-2024-41760 NVD summary: IBM Common Cryptographic Architecture 7.0.0 through 7.5.51 could allow an attacker to obtain sensitive information due to a timing attack during certain RSA operations. […]

🟡 Medium   ⏱ 15–45 min  Last verified: 27 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-50945, IBM Support Bulletin CVE: CVE-2023-50945 NVD summary: IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user. References: www.ibm.com/support/pages/node/7161947 Table of contents […]

🟡 Medium   ⏱ 15–45 min  Last verified: 26 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-28514, IBM Support Bulletin CVE: CVE-2023-28514 NVD summary: IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned […]

🟡 Medium   ⏱ 15–45 min  Last verified: 26 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2023-50946, IBM Support Bulletin CVE: CVE-2023-50946 NVD summary: IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a […]

🟡 Medium   ⏱ 15–45 min  Last verified: 6 March 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-41783, IBM Support Bulletin CVE: CVE-2024-41783 NVD summary: IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.1.0.0, and 6.2.0.0 could allow a privileged user to inject commands into the underlying operating system […]

🟢 Low   ⏱ 10–30 min  Last verified: 28 February 2024 Affected versions: IBM AIX 7.3 📖 ~4 min read  •  Source: NVD CVE-2024-55895, IBM Support Bulletin CVE: CVE-2024-55895 NVD summary: IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the […]