Skip to main content

I2 Analyze

5 CVEs product

Monthly

CVE-2021-29784 Jul 26, 12:15 MEDIUM PATCH This Month

IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
CVSS 3.1
4.3
EPSS
1.0%
CVE-2021-29770 Jul 26, 12:15 MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass IBM I2 Analyze
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2021-29769 Jul 26, 12:15 MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
CVSS 3.1
4.3
EPSS
0.5%
CVE-2021-29766 Jul 26, 12:15 MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
CVSS 3.1
5.3
EPSS
1.3%
CVE-2021-20430 Jul 26, 12:15 MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
CVSS 3.1
5.3
EPSS
1.3%
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Authentication Bypass IBM I2 Analyze
NVD
EPSS 1% CVSS 4.3
MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD
EPSS 1% CVSS 5.3
MEDIUM PATCH This Month

IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure IBM I2 Analyze
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy