High Severity

Security Bulletin: A Security Vulnerability in IBM® WebSphere Application Server Liberty affect IBM LKS Administration and Reporting Tool and its Agent

Nov 29, 2021 7:01 pm EST | High Severity

A security vulnerability, related to Apache Commons Compress library, has been found in the IBM® WebSphere Application Server Liberty used by IBM LKS Administration and Reporting Tool and its Agent. A fix has been identified and is being published here. ...read more


Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server Liberty affect IBM Operations Analytics – Log Analysis (CVE-2021-35517, CVE-2021-36090)

Nov 29, 2021 7:01 pm EST | High Severity

There are multiple vulnerabilities in the Apache Commons Compress library that is used by WebSphere Application Server Liberty. This has been addressed. ...read more


Security Bulletin: Multiple vulnerabilities affect IBM HTTP Server (powered by Apache) for i

Nov 29, 2021 7:01 pm EST | High Severity

IBM HTTP Server (powered by Apache) for i is vulnerable to the issues described in the vulnerability details section. IBM i has addressed the applicable CVEs in the Apache HTTP Server implementation. ...read more


Security Bulletin: IBM MQ Appliance is affected by a code injection vulnerability (CVE-2021-38967)

Nov 29, 2021 7:00 pm EST | High Severity

IBM MQ Appliance has resolved a code injection vulnerability. ...read more


Security Bulletin: Vulnerability in jsoup may affect Cúram Social Program Management (CVE-2021-37714)

Nov 25, 2021 7:01 pm EST | High Severity

IBM Cúram Social Program Management uses the jsoup libraries, for which there is a publicly known vulnerability. For this vulnerability jsoup is susceptible to a denial of service attack, caused by improper input validation. ...read more


Security Bulletin: Vulnerabilities affect IBM Netcool Agile Service Manager

Nov 25, 2021 7:00 pm EST | High Severity

Vulnerabilities exist in IBM Netcool Agile Service Manager, these have been addressed. ...read more


Security Bulletin: Vulnerabilities affect IBM Netcool Agile Service Manager

Nov 24, 2021 7:00 pm EST | High Severity

Vulnerabilities exist in IBM Netcool Agile Service Manager, these have been addressed. ...read more


Security Bulletin: Vulnerabilities in Node.js affect IBM Integration Bus v10 (CVE-2021-32803)

Nov 24, 2021 7:00 pm EST | High Severity

IBM Integration Bus ships with Node.js for which vulnerabilities were reported and have been addressed. Vulnerability details are listed below. ...read more


Security Bulletin: IBM Planning Analytics Workspace is affected by security vulnerabilities

Nov 23, 2021 7:00 pm EST | High Severity

The Planning Analytics Workspace component of IBM Planning Analytics is affected by security vulnerabilities. These have been addressed in IBM Planning Analytics Local v2.0 - Planning Analytics Workspace Release 70. ...read more