Lucene search
IBMCA643463AA3DD27CF347651D7B084BEA39601B3E21A99AD0FE90A4163037F126HistoryJan 12, 2022 - 7:29 p.m.
Security Bulletin:Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager
2022-01-1219:29:05
www.ibm.com
49
ibm websphere application server
ibm security identity manager
security vulnerabilities
apache log4j
cve-2021-4104
cve-2021-45046
ibm security verify governance.
EPSS
0.973
Percentile
99.9%
Summary
IBM WebSphere Application Server (WAS) is shipped with IBM Security Identity Manager (ISIM). Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin.
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| ISIM | 6.0.0 |
| ISIM | 6.0.2 |
| IBM Security Verify Governance, Identity Manager software component | All |
Remediation/Fixes
| Principal Product and Version(s) | Affected Supporting Product and Version(s) | Affected Supporting Product Security Bulletin |
|---|---|---|
| ISIM 6.0.0 | WAS 7.0, 8.5 |
Security Bulletin:Multiple vulnerabilities in Apache Log4j affects WebSphere Application Server traditional(CVE-2021-4104,CVE-2021-45046)
ISIM 6.0.2,
IBM Security Verify Governance, Identity Manager software component
| WAS 9.0
Workarounds and Mitigations
None
Related
ibm
ibm
osv
osv
log4j-2.16.0-2.1 on GA media
2024-06-15 00:00:00
apache-log4j2 - security update
2021-12-16 00:00:00
kafka-kit-2.1.0-2.1 on GA media
2024-06-15 00:00:00
gentoo
gentoo
Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
Arduino: Remote Code Execution
2023-12-22 00:00:00
Minecraft Server: Remote Code Execution
2023-12-20 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-19 05:13:25
Exploit for Expression Language Injection in Apache Log4J
2021-12-10 22:35:00
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-17 10:36:16
symantec
symantec
Symantec Security Advisory for Log4j Vulnerability
2021-12-11 01:06:47
redhat
redhat
attackerkb
attackerkb
CVE-2021-44228 (Log4Shell)
2022-02-08 00:00:00
threatpost
threatpost
Apache’s Fix for Log4Shell Can Lead to DoS Attacks
2021-12-15 14:04:19
nessus
nessus
GLSA-202310-16 : Ubiquiti UniFi: remote code execution via bundled log4j
2023-10-26 00:00:00
Apache Log4j 2.x < 2.16.0 RCE (MacOS) (deprecated)
2021-12-17 00:00:00
RHEL 7 : rh-maven36-log4j12 (RHSA-2021:5269)
2021-12-23 00:00:00
qualysblog
qualysblog
New Options Profiles for Log4Shell Detection
2021-12-20 17:33:11
CVE-2021-44228: Apache Log4j2 Zero-Day Exploited in the Wild (Log4Shell)
2021-12-10 19:30:11
Is Your Web Application Exploitable By Log4Shell Vulnerability?
2021-12-15 17:06:36
thn
thn
New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability
2021-12-18 12:18:00
New Apache Log4j Update Released to Patch Newly Discovered Vulnerability
2021-12-29 04:59:00
rapid7blog
rapid7blog
The Everyperson’s Guide to Log4Shell (CVE-2021-44228)
2021-12-15 19:44:42
Widespread Exploitation of Critical Remote Code Execution in Apache Log4j
2021-12-10 15:30:00
freebsd
freebsd
OpenSearch -- Log4Shell
2021-12-14 00:00:00
cnvd
cnvd
Apache log4j2 denial of service vulnerability
2021-12-16 00:00:00
Apache Log4j Code Execution Vulnerability
2021-12-16 00:00:00
suse
suse
Security update for log4j12 (important)
2021-12-24 00:00:00
Security update for log4j12 (important)
2021-12-17 00:00:00
Security update for kafka (important)
2021-12-28 00:00:00
oraclelinux
oraclelinux
log4j security update
2021-12-21 00:00:00
log4j security update
2022-01-26 00:00:00
kaspersky
kaspersky
KLA12391 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
KLA12407 RCE vulnerability in Apache Log4j
2021-12-14 00:00:00
openvas
openvas
CentOS: Security Advisory for log4j (CESA-2021:5206)
2022-01-11 00:00:00
openSUSE: Security Advisory for log4j12 (openSUSE-SU-2021:1612-1)
2022-02-01 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:14866-1)
2021-12-18 00:00:00
ubuntu
ubuntu
Apache Log4j 1.2 vulnerability
2022-02-08 00:00:00
Apache Log4j 1.2 vulnerability
2022-01-12 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2021-4104
2022-01-17 14:23:20
github
github
centos
centos
log4j security update
2021-12-21 21:36:17
arista
arista
Security Advisory 0070
2021-12-12 00:00:00
EPSS
0.973
Percentile
99.9%
Related for CA643463AA3DD27CF347651D7B084BEA39601B3E21A99AD0FE90A4163037F126