IBM Security Bulletin: HTTP Parameter Pollution and XSS vulnerability in WebSphere Application Server Admin Console ND (CVE-2019-4271)

Sep 16, 2019 3:51 pm EDT | Low Severity

There is a Client-side HTTP parameter pollution vulnerability and a Cross-site scripting vulnerability in WebSphere Application Server Admin Console. CVE(s): CVE-2019-4271 Affected product(s) and affected version(s): This vulnerability affects the following: WebSphere Application Server Version 9.0 WebSphere Application Server Version 8.5 WebSphere Virtual Enterprise Version 7.0 Refer to the following reference URLs for remediation and ...read more

IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Security Access Manager (CVE-2019-2426, CVE-2019-2449, CVE-2019-2422)

Sep 16, 2019 3:51 pm EDT | Low Severity

There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.7, 1.8 used by IBM Security Access Manager. IBM Security Access Manager has addressed the applicable CVEs. CVE(s): CVE-2019-2426, CVE-2019-2449, CVE-2019-2422 Affected product(s) and affected version(s): IBM Security Access Manager Appliance 7,0, 8.0, 9.0 Refer to the following reference URLs for remediation and additional ...read more

IBM Security Bulletin: A vulnerability in IBM Websphere Application Server affects the IBM Performance Management product (CVE-2018-1902)

Sep 16, 2019 3:49 pm EDT | Low Severity

IBM WebSphere Application Server could allow a remote attacker to spoof connection information which could be used to launch further attacks against the system. IBM Performance Management has addressed the applicable CVE. CVE(s): CVE-2018-1902 Affected product(s) and affected version(s): IBM Cloud Application Performance Management, Base Private 8.1.4 IBM Cloud Application Performance Management, Advanced Private 8.1.4 ...read more

IBM Security Bulletin: Vulnerabilities in WebSphere Application Server

Sep 16, 2019 3:49 pm EDT | Low Severity

There are vulnerabilities in WebSphere Application Server used by IBM Streams. IBM Streams has addressed the applicable CVEs. CVE(s): CVE-2018-1902 Affected product(s) and affected version(s): Affected InfoSphere Streams Affected Versions InfoSphere Streams 4.0.1.6 and earlier InfoSphere Streams 3.2.1.6 and earlier IBM Streams 4.1.1.8 and earlier IBM Streams 4.2.1.6 and earlier IBM Streams 4.3.0.2 and earlier ...read more

IBM Security Bulletin: IBM MQ Appliance affected by an OpenSSH vulnerability (CVE-2019-6110)

Aug 19, 2019 12:09 pm EDT | Low Severity

IBM MQ Appliance has addressed the following OpenSSH vulnerability. CVE(s): CVE-2019-6110 Affected product(s) and affected version(s): IBM MQ Appliance 8 Maintenance levels between 8.0.0.0 and 8.0.0.11 IBM MQ Appliance 9.1 Long Term Support (LTS) Release Maintenance levels between 9.1.0.0 and 9.1.0.2 IBM MQ Appliance 9.1.x Continuous Delivery (CD) Release Continuous delivery updates 9.1.1 and 9.1.2 ...read more

IBM Security Bulletin: Financial Transaction Manager for Digital Payments: Information Leakage in configuration listing (CVE-2018-1670)

Jul 29, 2019 9:01 am EDT | Low Severity

IBM Financial Transaction Manager for Digital Payments (FTM DP) for Multi-Platform could allow an authenticated user to obtain sensitive product configuration information from log files. CVE(s): CVE-2018-1670 Affected product(s) and affected version(s): FTM DP v3.2.0.0 Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10731497X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/144946 ...read more

IBM Security Bulletin: IBM RackSwitch firmware products are affected by vulnerability in OpenSSL (CVE-2018-0734)

Jul 17, 2019 9:01 am EDT | Low Severity

IBM RackSwitch firmware products listed below have addressed the following vulnerability in OpenSSL. CVE(s): CVE-2018-0734 Affected product(s) and affected version(s): Product Affected Version IBM RackSwitch G8000 7.1 IBM RackSwitch G8052 7.9 IBM RackSwitch G8052 7.11 IBM RackSwitch G8124/G8124E 7.11 IBM RackSwitch G8264 7.11 IBM RackSwitch G8264CS 7.8 IBM RackSwitch G8264T 7.9 IBM RackSwitch G8316 7.9 ...read more

IBM Security Bulletin: IBM Flex System switch firmware products are affected by vulnerability in OpenSSL (CVE-2018-0734)

Jul 17, 2019 9:01 am EDT | Low Severity

IBM Flex System switch firmware products have addressed the following vulnerability in OpenSSL. CVE(s): CVE-2018-0734 Affected product(s) and affected version(s): Product Affected Version IBM Flex System Fabric EN4093/EN4093R 10Gb Scalable Switch firmware 7.8 IBM Flex System EN2092 1Gb Ethernet Scalable firmware 7.8 IBM Flex System Fabric GbFSIM 10Gb Scalable Switch firmware 7.8 IBM Flex System ...read more

IBM Security Bulletin: Mozilla Firefox vulnerability in IBM SONAS (CVE-2019-11708)

Jul 10, 2019 9:03 am EDT | Low Severity

There is a security vulnerability in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.11 of IBM SONAS CVE(s): CVE-2019-11708 Affected product(s) and affected version(s): IBM SONAS The product is affected when running code releases 1.5.1.0 to 1.5.2.11 Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10958151X-Force ...read more