CVSS: 3.3EPSS: 0%CPEs: 3EXPL: 0CVE-2020-4345
https://notcve.org/view.php?id=CVE-2020-4345
17 May 2020 — IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318. Los usuarios de IBM i versiones 7.2, 7.3 y 7.4, que ejecutan sentencias SQL complejas bajo un conjunto específico de circunstancias pueden permitir a un usuario local obtener información confidencial a la que no debería tener acceso. IBM X-Force ID: 178318. • https://exchange.xforce.ibmcloud.com/vulnerabilities/178318 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2019-4450
https://notcve.org/view.php?id=CVE-2019-4450
09 Nov 2019 — IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163492. IBM i versiones 7.2, 7.3 y 7.4 para i es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcio... • https://exchange.xforce.ibmcloud.com/vulnerabilities/163492 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.9EPSS: 0%CPEs: 2EXPL: 0CVE-2019-4381
https://notcve.org/view.php?id=CVE-2019-4381
14 Jun 2019 — IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node failure detection using the REST API to interface with the HMC. An attacker could exploit this vulnerability to obtain HMC credentials. IBM X-Force ID: 162159. EI Clustering de BM i versión 7.27.3 podría permitir a un atacante local conseguir información confidencial, generada por el uso de la detección avanzada de fallos de nodo utilizando la API REST para interactuar con la HMC. Un atac... • http://www.securityfocus.com/bid/108808 • CWE-255: Credentials Management Errors •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2019-4040
https://notcve.org/view.php?id=CVE-2019-4040
31 Jan 2019 — IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 156164. IBM I 7.2 y 7.3 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuario web, lo que altera las funcionalidades previstas. • http://www.ibm.com/support/docview.wss?uid=ibm10869384 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2017-1460
https://notcve.org/view.php?id=CVE-2017-1460
31 Jul 2017 — IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of connectivity. IBM X-Force ID: 128379. IBM i OSPF versiones 6.1, 7.1, 7.2 y 7.3 es vulnerable cuando un router malicioso suplanta su origen. Las tablas de ruteo se ven afectadas por una falta de LSA, que puede conllevar a la pérdida de conectividad. • http://www.ibm.com/support/docview.wss?uid=nas8N1022191 • CWE-20: Improper Input Validation •