🟠 High ⏱ 30–90 min Last verified: 21 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2007-4354, IBM Support Bulletin CVE: CVE-2007-4354 NVD summary: Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. References: ftp://aix.software.ibm.com/aix/efixes/security/R […]
🟡 Medium ⏱ 15–45 min Last verified: 20 July 2022 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-40752, IBM Support Bulletin CVE: CVE-2022-40752 NVD summary: IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687. References: exchange.xforce.ibmcloud.com/vulnerabilities/236 […]
🟢 Low ⏱ 10–30 min Last verified: 19 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0627, IBM PSIRT advisory page CVE: CVE-1999-0627 NVD summary: The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of […]
🟡 Medium ⏱ 15–45 min Last verified: 19 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-35721, IBM Support Bulletin CVE: CVE-2022-35721 NVD summary: IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]
🟡 Medium ⏱ 15–45 min Last verified: 19 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2011-0637, IBM Support Bulletin CVE: CVE-2011-0637 NVD summary: The FC SCSI protocol driver in IBM AIX 6.1 does not verify that a timer is unused before deallocating this timer, which might allow […]
🟠 High ⏱ 30–90 min Last verified: 18 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2007-6717, IBM Support Bulletin CVE: CVE-2007-6717 NVD summary: Buffer overflow in tftp in bos.net.tcp.client in IBM AIX 5.2.0 and 5.3.0 allows local users to gain privileges via unspecified vectors. References: secunia.com/advisories/27437 […]
🟠 High ⏱ 30–90 min Last verified: 17 July 2022 Affected versions: IBM AIX 7.3 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2021-38991, IBM Support Bulletin CVE: CVE-2021-38991 NVD summary: IBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the lscore […]
🟡 Medium ⏱ 15–45 min Last verified: 15 July 2022 Affected versions: IBM AIX 7.3 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2021-29693, IBM Support Bulletin CVE: CVE-2021-29693 NVD summary: IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that is in the with elevated group privileges to […]
🟡 Medium ⏱ 15–45 min Last verified: 15 July 2022 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-35642, IBM Support Bulletin CVE: CVE-2022-35642 NVD summary: "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]
🟠 High ⏱ 30–90 min Last verified: 15 July 2022 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38890, IBM Support Bulletin CVE: CVE-2021-38890 NVD summary: IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account […]
