🟡 Medium ⏱ 15–45 min Last verified: 14 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2020-4885, IBM Support Bulletin CVE: CVE-2020-4885 NVD summary: IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow a local user to access and change the configuration of […]
🟡 Medium ⏱ 15–45 min Last verified: 14 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38949, IBM Support Bulletin CVE: CVE-2021-38949 NVD summary: IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a […]
🟠 High ⏱ 30–90 min Last verified: 14 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2005-0240, IBM Support Bulletin CVE: CVE-2005-0240 NVD summary: Format string vulnerability in chdev on IBM AIX 5.2 allows local users to execute arbitrary code via format string specifiers in a command line […]
🟡 Medium ⏱ 15–45 min Last verified: 13 February 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-25256, IBM PSIRT advisory page CVE: CVE-2022-25256 NVD summary: SAS Web Report Studio 4.4 allows XSS. /SASWebReportStudio/logonAndRender.do has two parameters: saspfs_request_backlabel_list and saspfs_request_backurl_list. The first one affects the content of the button […]
🟡 Medium ⏱ 15–45 min Last verified: 13 February 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-40750, IBM Support Bulletin CVE: CVE-2022-40750 NVD summary: IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web […]
🟡 Medium ⏱ 15–45 min Last verified: 11 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2020-4771, IBM Support Bulletin CVE: CVE-2020-4771 NVD summary: IBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitive information, caused by improper authentication […]
🟡 Medium ⏱ 15–45 min Last verified: 11 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2010-2594, IBM PSIRT advisory page CVE: CVE-2010-2594 NVD summary: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent […]
🟠 High ⏱ 30–90 min Last verified: 11 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-29737, IBM Support Bulletin CVE: CVE-2021-29737 NVD summary: IBM InfoSphere Data Flow Designer Engine (IBM InfoSphere Information Server 11.7 ) component has improper validation of the REST API server certificate. IBM X-Force […]
🟡 Medium ⏱ 15–45 min Last verified: 10 February 2023 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2022-47990, IBM Support Bulletin CVE: CVE-2022-47990 NVD summary: IBM AIX 7.1, 7.2, 7.3 and VIOS, 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 […]
🟡 Medium ⏱ 15–45 min Last verified: 10 February 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-36772, IBM Support Bulletin CVE: CVE-2022-36772 NVD summary: IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. References: […]
