IBM I 7.4

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i privilege escalation

IBM i is Affected By Path Traversal Vulnerability in Navigator for i

IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

IBM i incorrect privilege assignment

IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.

The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.

IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i denial of service

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Denial of Service Vulnerability in Save Restore []

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []

IBM i Information Disclosure

IBM i is Affected By Stored Cross-site Scripting for i

IBM Navigator for i SQL injection

IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163492.

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404.

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i server-side request forgery

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516.

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i improper HTTP header neutralization

IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i improper certificate validation

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM PowerHA SystemMirror for i clickjacking

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in NetServer