🟠 High ⏱ 30–90 min Last verified: 4 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2001-0671, IBM PSIRT advisory page CVE: CVE-2001-0671 NVD summary: Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root […]
🟡 Medium ⏱ 15–45 min Last verified: 4 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2008-2163, IBM Support Bulletin CVE: CVE-2008-2163 NVD summary: Cross-site scripting (XSS) vulnerability in IBM Lotus Quickr 8.1 before Hotfix 5 for Windows and AIX, and before Hotfix 3 for i5/OS, allows remote […]
🟡 Medium ⏱ 15–45 min Last verified: 4 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2022-35646, IBM Support Bulletin CVE: CVE-2022-35646 NVD summary: IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using […]
🟠 High ⏱ 30–90 min Last verified: 3 February 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0118, IBM PSIRT advisory page CVE: CVE-1999-0118 NVD summary: AIX infod allows local users to gain root access through an X display. References: marc.info/?l=bugtraq&m=91158980826979&w=2 marc.info/?l=bugtraq&m=91158980826979&w=2 Table of contents Symptom & Impact […]
🟠 High ⏱ 30–90 min Last verified: 3 February 2023 Affected versions: IBM AIX 7.3 Affected: 7.2, 7.3 📖 ~4 min read • Source: NVD CVE-2023-45166, IBM Support Bulletin CVE: CVE-2023-45166 NVD summary: IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the piodmgrsu command […]
🟡 Medium ⏱ 15–45 min Last verified: 2 February 2023 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2022-40753, IBM Support Bulletin CVE: CVE-2022-40753 NVD summary: IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus […]
🟡 Medium ⏱ 15–45 min Last verified: 30 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-1999-0128, IBM PSIRT advisory page CVE: CVE-1999-0128 NVD summary: Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE exchange.xforce.ibmcloud.com/vulnerabilities/CVE Table of contents Symptom […]
🟡 Medium ⏱ 15–45 min Last verified: 30 January 2023 Affected versions: IBM AIX 7.3 📖 ~4 min read • Source: NVD CVE-2021-38977, IBM Support Bulletin CVE: CVE-2021-38977 NVD summary: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may […]
🟡 Medium ⏱ 15–45 min Last verified: 29 January 2023 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2022-43872, IBM Support Bulletin CVE: CVE-2022-43872 NVD summary: IBM Financial Transaction Manager 3.2.4 authorization checks are done incorrectly for some HTTP requests which allows getting unauthorized technical information (e.g. event log entries) […]
🟠 High ⏱ 30–90 min Last verified: 29 January 2023 Affected versions: IBM AIX 7.3 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3074, IBM Support Bulletin CVE: CVE-2014-3074 NVD summary: The runtime linker in IBM AIX 6.1 and 7.1 and VIOS 2.2.x allows local users to create a mode-666 root-owned file, and […]
