Pureapplication System (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 44 known versions, newest CVE from 2019-06-26. Vendor: Ibm.
CVEs of Pureapplication System
- CVE-2019-4234 - CVSS 4.3 (medium), 2019-06-26: IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor. An attacker by intercepting the…
- CVE-2019-4241 - CVSS 8.4 (high), 2019-06-26: IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative…
- CVE-2019-4235 - CVSS 7.5 (high), 2019-06-26: IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to…
- CVE-2019-4225 - CVSS 4.4 (medium), 2019-06-26: IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID:…
- CVE-2019-4224 - CVSS 8.8 (high), 2019-06-26: IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could…
- CVE-2015-0235 - CVSS 10 (critical), 2015-01-28: Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to…
- CVE-2014-6158 - CVSS 9 (critical), 2015-01-10: Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0…
- CVE-2014-7169 - CVSS 9.8 (critical), 2014-09-25: GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows…
- CVE-2014-6271 - CVSS 9.8 (critical), 2014-09-24: GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute…
- CVE-2014-0960 - CVSS 6.6 (medium), 2014-06-14: IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by…
