IBM i

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5 and 6.0.0.0 through 6.0.3.1 discloses sensitive information to an authenticated user from the dashboard UI which could be used in further attacks against the system. IBM X-Force ID: 172753.

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Denial of Service Vulnerability in Save Restore []

IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i is Affected By Multiple Vulnerabilities in Host Servers

IBM Common Cryptographic Architecture information disclosure

IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i denial of service

IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []

IBM Common Cryptographic Architecture denial of service

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i Information Disclosure

IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596.

IBM i is Affected by a Denial of Service Vulnerability []

IBM i is Affected By An Improper Authentication Vulnerability in SST / DST

IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i is Affected By Stored Cross-site Scripting for i

IBM Navigator for i SQL injection

IBM i is Affected By Multiple Vulnerabilities in SQL

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM MQ information disclosure

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 211403.

IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164.

IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163492.

IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186094.

IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186095.

IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 208404.

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159.

IBM WebSphere Application Server Liberty is affected by a denial of service

IBM WebSphere Application Server XML external entity injection

IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP [, ]

IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM WebSphere Application Server cross-site scripting