2019-09-16

2019-09-17

2019-09-18

All (2) Critical (6) High (23) Medium (19) Low (2)

CVE-2019-4171 Sep 17, 19:15 LOW PATCH Monitor

IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 does not set the secure attribute on authorization tokens or session cookies. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure IBM Cognos Controller

NVD

CVSS 3.1

3.7

EPSS

0.6%

CVE-2019-4271 Sep 17, 19:15 LOW PATCH Monitor

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin console is vulnerable to a Client-side HTTP parameter pollution vulnerability. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure IBM Websphere Application Server

NVD

CVSS 3.1

3.5

EPSS

0.8%