IBM I

IBM i is Affected By A Denial of Service Vulnerability []

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM MQ denial of service

IBM WebSphere Application Server information disclosure

IBM i Denial of Service

Websphere Application Server is Affected By a Denial of Service

IBM WebSphere Application Server Liberty denial of service

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected by Algorithm Downgrade in Transport Layer Security []

IBM i privilege escalation

IBM i is Affected By Denial of Service Vulnerability []

IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM WebSphere Application Server information disclosure

IBM WebSphere Application Server is affected by an authentication bypass vulnerability

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability

IBM i privilege escalation

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

IBM i is Affected By Path Traversal Vulnerability in Navigator for i

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i incorrect privilege assignment

IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. A user with restore privileges could exploit this vulnerability to obtain elevated privileges on the restored system. IBM X-Force ID: 165592.

The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially crafted request and cause a denial of service. IBM X-Force ID: 214537.

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502.

IBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exploit this weakness to obtain sensitive information and gain unauthorized access to JAX-WS applications. IBM X-Force ID: 217224.

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 could allow an authenticated user could manipulate cookie information and remove or add modules from the cookie to access functionality not authorized to. IBM X-Force ID: 175638.

IBM MQ denial of service

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM Common Cryptographic Architecture information disclosure

IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty