Page 132 of 7187 results (0.010 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-5026

https://notcve.org/view.php?id=CVE-2020-5026

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 193662. • https://exchange.xforce.ibmcloud.com/vulnerabilities/193662 https://www.ibm.com/support/pages/node/6958504 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2020-5002 – IBM Financial Transaction Manager security bypass

https://notcve.org/view.php?id=CVE-2020-5002

IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954. • https://exchange.xforce.ibmcloud.com/vulnerabilities/192954 https://www.ibm.com/support/pages/node/6958504 • CWE-20: Improper Input Validation •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-5001 – IBM Financial Transaction Manager path traversal

https://notcve.org/view.php?id=CVE-2020-5001

IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953. • https://exchange.xforce.ibmcloud.com/vulnerabilities/192953 https://www.ibm.com/support/pages/node/6958504 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0

CVE-2022-43902 – IBM MQ denial of service

https://notcve.org/view.php?id=CVE-2022-43902

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832. • https://exchange.xforce.ibmcloud.com/vulnerabilities/240832 https://www.ibm.com/support/pages/node/6890643 •

CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0

CVE-2023-26281 – IBM HTTP Server denial of service

https://notcve.org/view.php?id=CVE-2023-26281

IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296. • https://exchange.xforce.ibmcloud.com/vulnerabilities/248296 https://www.ibm.com/support/pages/node/6958522 • CWE-20: Improper Input Validation •