IBM I

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server cross-site scripting

IBM i improper HTTP header neutralization

IBM WebSphere Application Server Liberty Server-Side Request Forgery

IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i improper certificate validation

IBM i is Affected By Multiple Vulnerabilities in Debug Server

Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

IBM PowerHA SystemMirror for i clickjacking

IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 178964.

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895.

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.

IBM MQ denial of service

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i information disclosure

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i information disclosure

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

IBM i is Affected By Cryptographic Algorithm Weakness in DCM []

IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i authentication bypass

IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803.

IBM Navigator for i information disclosure

IBM Navigator for i information disclosure

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force ID: 176606.

IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

IBM i is Affected By Multiple Vulnerabilities in Navigator for i

IBM Navigator for i SQL injection