Security Bulletin: Openstack Compute (Nova) noVNC proxy
Oct 26, 2021 8:00 pm EDT | High Severity
Fix OpenStack Nova allowing a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in the noVNC component. By modifying untrusted URL input using multiple backslashes, an attacker could exploit this vulnerability to redirect a victim to arbitrary website ...read more
Security Bulletin: Cross-Site Scripting Vulnerability Affects Dashboard UI of IBM Sterling B2B Integrator (CVE-2021-29764)
Oct 26, 2021 8:00 pm EDT | Medium Severity
IBM Sterling B2B Integrator has addressed a stored cross-site scripting vulnerability in the Web UI. ...read more
Security Bulletin: Insufficient session expiration in IBM i2 iBase
Oct 26, 2021 8:00 pm EDT | Medium Severity
IBM i2 iBase provides insufficient login sessioon timeouts ...read more
Security Bulletin: A vulnerability exists in the restricted shell of the IBM FlashSystem 900
Oct 25, 2021 8:00 pm EDT | High Severity
A vulnerability exists in the IBM FlashSystem 900 restricted shell (CVE-2021-29873). An exploit of this vulnerability could allow an authenticated attacker to access sensitive information or cause a denial of service. ...read more
Security Bulletin: Cross-Site Scripting Vulnerability Affects Dashboard UI of IBM Sterling B2B Integrator (CVE-2021-29764)
Oct 25, 2021 8:00 pm EDT | Medium Severity
IBM Sterling B2B Integrator has addressed a stored cross-site scripting vulnerability in the Web UI. ...read more
Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities
Oct 25, 2021 8:00 pm EDT | High Severity
The Planning Analytics Workspace component of IBM Planning Analytics is affected by vulnerabilities These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 69. ...read more
Security Bulletin: Multiple vulnerabilities affect IBM Rational® Application Developer for WebSphere® Software – September 2021
Oct 25, 2021 8:00 pm EDT | Critical Severity
Vulnerabilities detected in Node.js versions before v14.16.2 affects IBM Rational® Application Developer for WebSphere® Software. ...read more
Security Bulletin: Multiple vulnerabilites affect Engineering Lifecycle Management and IBM Engineering products.
Oct 25, 2021 8:00 pm EDT | High Severity
There are multiple vulnerabilities that are used by IBM Jazz Team Server affecting the following IBM Jazz Team Server based Applications: Engineering Lifecycle Management (ELM), IBM Engineering Requirements Management DOORS Next (DOORS Next), IBM Engineering Workflow Management (EWM), IBM Engineering Systems Design Rhapsody, IBM Engineering Requirements Quality Assistant On-Premises. ...read more
Security Bulletin: Oracle Database Server Vulnerability Affects IBM Emptoris Supplier Lifecycle Mgmt (CVE-2021-2329)
Oct 22, 2021 8:03 pm EDT | High Severity
An Oracle database server vulnerability has been addressed by IBM Emptoris Supplier Lifecycle Mgmt. ...read more