Medium Severity

Security Bulletin: CVE-2021-2161 may affect IBM® SDK, Java™ Technology Edition

Share this post:

CVE-2021-2161 was disclosed in the Oracle April 2021 Critical Patch Update.

CVE(s): CVE-2021-2161

Affected product(s) and affected version(s):

7.0.0.0 – 7.0.10.80
7.1.0.0 – 7.1.4.80
8.0.0.0 – 8.0.6.25
11.0.0.0 – 11.0.10.0

Note: CVE-2021-2161 is applicable only on Windows.

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6454459
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/200290

More stories

Security Bulletin: IBM QRadar Advisor With Watson is vulnerable to cross site scripting

Oct 19, 2021 8:03 pm EDT | Medium Severity

IBM QRadar Advisor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. ...read more


Security Bulletin: IBM® Db2® could allow a local user to read and write specific files due to weak file permissions (CVE-2020-4976)

Oct 19, 2021 8:01 pm EDT | Medium Severity

IBM® Db2® could allow a local user to read and write specific files due to weak file permissions ...read more


Security Bulletin: IBM® Db2® is vulnerable to an information disclosure, exposing remote storage credentials to privileged users under specific conditions.(CVE-2021-29752)

Oct 19, 2021 8:01 pm EDT | Medium Severity

IBM® Db2® is vulnerable to an information disclosure, exposing remote storage credentials to privileged users under specific conditions.(CVE-2021-29752) ...read more