Resilient Security Orchestration Automation And Response (Ibm) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2021-08-23. Vendor: Ibm.
CVEs of Resilient Security Orchestration Automation And Response
- CVE-2021-29802 - CVSS 7.5 (high), 2021-08-23: IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the…
- CVE-2021-29704 - CVSS 7.5 (high), 2021-08-23: IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- CVE-2021-29780 - CVSS 4.7 (medium), 2021-07-19: IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input…
- CVE-2021-20567 - CVSS 4.4 (medium), 2021-06-16: IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID:…
- CVE-2021-20566 - CVSS 7.5 (high), 2021-06-16: IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force…
- CVE-2020-4633 - CVSS 8.8 (high), 2020-12-11: IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input validation.
- CVE-2020-4864 - CVSS 4.3 (medium), 2020-10-29: IBM Resilient SOAR V38.0 could allow an attacker on the internal net work to provide the server with a spoofed source IP address. IBM X-Force ID: 190567.
- CVE-2020-4636 - CVSS 8.2 (high), 2020-10-16: IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.
- CVE-2019-4533 - CVSS 4.3 (medium), 2020-08-28: IBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force ID: 165589.
- CVE-2019-4579 - CVSS 4.3 (medium), 2020-08-28: IBM Resilient SOAR 38 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to…
