IBM i

IBM MQ information disclosure

IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

IBM i is Information Disclosure

IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232.

IBM i server-side request forgery

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184433.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.9 are vulnerable to HTTP header injection, caused by improper validation. This could allow an attacker to conduct various attacks against the vulnerable system, including cache poisoning and cross-site scripting. IBM X-Force ID: 229429.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.

IBM WebSphere Application Server cross-site scripting

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230516.

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM WebSphere Application Server cross-site scripting

IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service []

IBM i is Affected By Multiple Vulnerabilities in Debug Server

IBM i improper HTTP header neutralization

IBM WebSphere Application Server Liberty Server-Side Request Forgery

IBM i improper certificate validation

Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

IBM PowerHA SystemMirror for i clickjacking

IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH

IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 178964.

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 188895.

IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web interface without valid credentials. By modifying the sign on request, an attacker can gain visibility to the fully qualified domain name of the target system and the navigator tasks page, however they do not gain the ability to perform those tasks on the system or see any specific system data. IBM X-Force ID: 225899.

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.

IBM MQ denial of service

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i information disclosure

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i is Affected By Multiple Vulnerabilities in NetServer

IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

IBM i information disclosure

IBM i Information Disclosure