Lucene search
IBM142B1BA6B62A94740D651FE3E4D0F0F6D477022D6F17F392FBFC30D1D4D904E2HistoryApr 27, 2021 - 7:45 p.m.
Security Bulletin:Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager
2021-04-2719:45:58
www.ibm.com
11
0.015 Low
EPSS
Percentile
87.0%
Summary
IBM WebSphere Application Server (WAS) is shipped with IBM Security Identity Manager (ISIM). Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| ISIM | 6.0.0 |
| ISIM | 6.0.2 |
Remediation/Fixes
| Principal Product and Version(s) | Affected Supporting Product and Version(s) | Affected Supporting Product Security Bulletin |
|---|---|---|
| ISIM 6.0.0 | WAS 8.5 |
Security Bulletin: XML External Entity (XXE) Injection vulnerability in traditional WebSphere Application Server (CVE-2020-20453)
Security Bulletin: Vulnerability in Dojo affects in traditional WebSphere Application Server (CVE-2020-5258)
Security Bulletin: Vulnerability in Apache MyFaces affects in traditional WebSphere Application Server (CVE-2020-26296)
ISIM 6.0.2| WAS 9
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| ibm security identity manager | eq | 6.0.0 | |
| ibm security identity manager | eq | 6.0.2 |
Related
veracode
veracode
Cross-Site Scripting (XSS)
2020-12-31 07:59:42
Denial Of Service (DoS)
2021-10-20 11:33:49
Prototype Pollution
2020-03-11 04:28:44
openvas
openvas
Elastic Kibana < 6.8.14, 7.0.0 < 7.10.2 Vega XSS Vulnerability (ESA-2021-04) - Linux
2021-02-15 00:00:00
Elastic Kibana < 6.8.14, 7.0.0 < 7.10.2 Vega XSS Vulnerability (ESA-2021-04) - Windows
2021-02-15 00:00:00
Debian: Security Advisory (DLA-2139-1)
2020-03-18 00:00:00
cvelist
cvelist
CVE-2020-26296 XSS in Vega
2020-12-30 23:10:16
CVE-2020-20453
2021-05-25 19:15:21
CVE-2020-4276
2020-03-25 00:00:00
prion
prion
Format string
2020-12-30 23:15:00
Design/Logic Flaw
2021-05-25 20:15:00
Privilege escalation
2020-03-26 14:15:00
osv
osv
debiancve
debiancve
CVE-2020-20453
2021-05-25 20:15:07
CVE-2020-5258
2020-03-10 18:15:12
cve
cve
redhatcve
redhatcve
CVE-2020-26296
2021-02-10 21:43:50
CVE-2020-5258
2020-03-11 09:40:58
nvd
nvd
github
github
XSS in Vega
2020-12-30 23:09:21
Prototype pollution in dojo
2020-03-10 18:03:14
alpinelinux
alpinelinux
CVE-2020-20453
2021-05-25 20:15:07
ubuntucve
ubuntucve
CVE-2020-20453
2021-05-25 00:00:00
CVE-2020-5258
2020-03-10 00:00:00
ibm
ibm
nessus
nessus
IBM WebSphere Application Server 7.0.0.x <= 7.0.0.45 / 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.18 / 9.0.x < 9.0.5.4 Privilege Escalation (CVE-2020-4276)
2020-04-02 00:00:00
Oracle Enterprise Manager Ops Center UI and Other Patches (July 2021 CPU)
2023-01-19 00:00:00
Debian DLA-2139-1 : dojo security update
2020-03-12 00:00:00
githubexploit
githubexploit
Exploit for Code Injection in Linuxfoundation Dojo
2020-12-01 09:45:48
mageia
mageia
Updated dojo packages fix security vulnerability
2020-05-27 12:52:46
Updated ffmpeg packages fix security vulnerability
2021-10-29 22:32:22
debian
debian
[SECURITY] [DLA 2139-1] dojo security update
2020-03-11 19:14:41
[SECURITY] [DSA 4998-1] ffmpeg security update
2021-10-31 16:40:22
[SECURITY] [DLA 2818-1] ffmpeg security update
2021-11-14 20:47:56
ubuntu
ubuntu
FFmpeg vulnerabilities
2022-06-13 00:00:00
FFmpeg vulnerabilities
2022-06-08 00:00:00
cloudfoundry
cloudfoundry
USN-5472-1: FFmpeg vulnerabilities | Cloud Foundry
2022-07-28 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - October 2021
2021-10-19 00:00:00
0.015 Low
EPSS
Percentile
87.0%
Related for 142B1BA6B62A94740D651FE3E4D0F0F6D477022D6F17F392FBFC30D1D4D904E2