Latest Ibm Vulnerabilities

● IBM-7150297
IBM AIX<=7.2
IBM AIX<=7.3
IBM VIOS<=3.1
IBM VIOS<=4.1
● CVE-2024-27273
IBM AIX privilege escalation
IBM AIX<=7.2
IBM AIX<=7.3
IBM VIOS<=3.1
IBM VIOS<=4.1
● IBM-7150191
IBM Aspera Orchestrator<=4.0.1
● CVE-2023-27280
IBM Aspera Orchestrator uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt sensitive information.
IBM Aspera Orchestrator<=4.0.1
● CVE-2023-27281
IBM Aspera Orchestrator could allow a remote attacker to enumerate usernames due to observable response discrepancies.
IBM Aspera Orchestrator<=4.0.1
● CVE-2023-27283
IBM Aspera Orchestrator information disclosure
IBM Aspera Orchestrator<=4.0.1
● CVE-2023-37407
IBM Aspera Orchestrator command execution
IBM Aspera Orchestrator<=4.0.1
● IBM-7150117
IBM Aspera Orchestrator<=4.0.1
● IBM-7149968
IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0
IBM QRadar Suite Software<=1.10.12.0 - 1.10.20.0
● IBM-7149874
IBM Cognos Analytics<=12.0-12.0.2
IBM Cognos Analytics<=11.2.0-11.2.4 FP2
● CVE-2024-25047
IBM Cognos Analytics log injection
IBM Cognos Analytics<=12.0-12.0.2
IBM Cognos Analytics<=11.2.0-11.2.4 FP2
● CVE-2023-47727
IBM QRadar Suite Software file manipulation
IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0
IBM QRadar Suite Software<=1.10.12.0 - 1.10.20.0
● IBM-7149856
IBM WebSphere Automation<=1.7.0
● IBM-7149811
IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0
IBM QRadar Suite Software<=1.10.12.0 - 1.10.19.0
● IBM-7149857
IBM WebSphere Automation<=1.7.0
● CVE-2024-28775
IBM WebSphere Automation cross-site scripting
IBM WebSphere Automation<=1.7.0
● CVE-2024-28764
IBM WebSphere Automation CSV injection
IBM WebSphere Automation<=1.7.0
● CVE-2022-38386
IBM Cloud Pak for Security information disclosure
IBM Cloud Pak for Security<=1.10.0.0 - 1.10.11.0
IBM QRadar Suite Software<=1.10.12.0 - 1.10.19.0
● CVE-2023-38002
IBM Storage Scale session fixation
IBM Storage Scale<=5.1.0.0 - 5.1.9.2
● IBM-7149699
IBM Storage Scale<=5.1.0.0 - 5.1.9.2
● CVE-2024-25048
IBM MQ code execution
IBM MQ Appliance<=9.3 LTS
IBM MQ Appliance<=9.3 CD
● IBM-7149616
IBM Rational Development Studio for i<=7.5
IBM Rational Development Studio for i<=7.4
IBM Rational Development Studio for i<=7.3
IBM Rational Development Studio for i<=7.2
● CVE-2024-25050
IBM i privilege escalation
IBM i<=7.5
IBM i<=7.4
IBM i<=7.3
IBM i<=7.2
● IBM-7149672
IBM i<=7.5
IBM i<=7.4
IBM i<=7.3
IBM i<=7.2
● CVE-2024-25015
IBM MQ denial of service
IBM MQ<=9.2 LTS
IBM MQ<=9.3 LTS
IBM MQ<=9.3 CD
● IBM-7149583
IBM MQ<=9.2 LTS
IBM MQ<=9.3 LTS
IBM MQ<=9.3 CD
● IBM-7149481
IBM MQ Appliance<=9.3 LTS
IBM MQ Appliance<=9.3 CD
● CVE-2024-25026
IBM WebSphere Application Server denial of service
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.4
Ibm Websphere Application Server<=8.5
Ibm Websphere Application Server<=9.0
● IBM-7149330
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.4
Ibm Websphere Application Server<=8.5
Ibm Websphere Application Server<=9.0
● CVE-2023-37400
IBM Aspera Faspex privilege escalation
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● IBM-7148632
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● CVE-2023-27279
IBM Aspera Faspex denial of service
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
IBM Aspera Faspex>=5.0.0<=5.0.7
● CVE-2023-37395
IBM Aspera Faspex could allow a local user to obtain sensitive information due to improper encryption of certain data.
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● CVE-2023-37397
IBM Aspera Faspex data manipulation
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
IBM Aspera Faspex>=5.0.0<=5.0.7
● CVE-2022-40745
IBM Aspera Faspex information disclosure
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
IBM Aspera Faspex>=5.0.0<=5.0.7
● CVE-2023-22869
IBM Aspera Faspex information disclosure
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● CVE-2023-37396
IBM Aspera Faspex information disclosure
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● IBM-7148631
IBM Aspera Faspex 5<=5.0.0 - 5.0.7
● IBM-7148380
Ibm Websphere Application Server<=8.5
Ibm Websphere Application Server<=9.0
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.3
● CVE-2024-22329
IBM WebSphere Application Server server-side request forgery
Ibm Websphere Application Server<=8.5
Ibm Websphere Application Server<=9.0
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.3
● IBM-7148426
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.4
Ibm Websphere Application Server<=9.0
Ibm Websphere Application Server<=8.5
● CVE-2024-22354
IBM WebSphere Application Server XML external entity injection
IBM WebSphere Application Server Liberty<=17.0.0.3 - 24.0.0.4
Ibm Websphere Application Server<=9.0
Ibm Websphere Application Server<=8.5
● CVE-2024-31887
IBM Security Verify Privilege information disclosure
IBM Security Verify Privilege On-Premises<=11.6.25
● IBM-7148438
IBM Security Verify Privilege On-Premises<=11.6.25
● IBM-7148109
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1
● CVE-2024-22359
IBM UrbanCode Deploy cross-site scripting
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1
● CVE-2024-22358
IBM UrbanCode Deploy session fixation
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1
● IBM-7148112
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1
● CVE-2024-22334
IBM UrbanCode Deploy improper privilege control
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1
● CVE-2024-22339
IBM UrbanCode Deploy information disclosure
IBM UCD - IBM UrbanCode Deploy<=7.0 - 7.0.5.20
IBM UCD - IBM UrbanCode Deploy<=7.1 - 7.1.2.16
IBM UCD - IBM UrbanCode Deploy<=7.2 - 7.2.3.9
IBM UCD - IBM UrbanCode Deploy<=7.3 - 7.3.2.4
IBM UCD - IBM DevOps Deploy<=8.0 - 8.0.0.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203