IBM Planning Analytics 2.0 and 2.1 (Planning Analytics Local, Workspace component) contain a path traversal flaw caused by improper validation of file paths. A remote attacker can read arbitrary files on the host and overwrite certain application files. The official record gives CVSS 3.1 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), which means no authentication or user interaction is required; the IBM bulletin lists 8.1 for the same CWE-22 entry.
IBM · Planning Analytics
IBM Planning Analytics 2.0 and 2.1 (on-premise Local edition) contain an authentication bypass caused by improper validation of sub-requests. A remote attacker can bypass authentication and escalate privileges, which IBM rates with high impact to confidentiality, integrity and availability. The NVD record and the IBM bulletin list different CVSS scores for this CVE, so verify the score before using it for prioritisation.
IBM · Planning Analytics
IBM Planning Analytics 2.0 and 2.1 contain an improper authentication flaw that allows a remote attacker to gain unauthorized administrative access. According to the NVD, the attack requires low privileges, so an attacker with any valid user account may be able to reach administrative functions. IBM and NVD rate the vulnerability 8.8 (High), with full impact on confidentiality, integrity and availability.
IBM · Planning Analytics
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
IBM TRIRIGA Application Platform versions 5.0.0 through 5.0.8 do not properly validate file paths during archive extraction, a Zip Slip path traversal flaw (CWE-22). A remote attacker with a valid low-privilege account can exploit it to execute arbitrary code, according to IBM's CVSS 3.1 score of 8.8. IBM's advisory does not describe any workaround.
IBM · TRIRIGA Application Platform
IBM Maximo AI Service versions 9.1.0 and 9.2.0 contain a code injection flaw (CWE-94) that allows a remote attacker to execute arbitrary code. Per the CVSS vector, no privileges or user interaction are required over the network, and the impact on confidentiality, integrity and availability is rated high. The vendor's information does not describe a prerequisite beyond network reachability of the affected service.
IBM · Maximo AI Service
IBM Power 10 systems running Power Systems Firmware (PowerVM Hypervisor) FW1060.00 through FW1060.81 are affected by a stack-based buffer overflow (CWE-121) in the parsing of host firmware configuration data. An attacker with authenticated service-level access to the FSP can write crafted configuration data that corrupts memory during system IPL, which can compromise the host firmware boot stack and the hypervisor loaded afterwards. IBM rates the impact as high for confidentiality, integrity and availability of the managed system.
IBM · Power Systems Firmware
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a flaw in the service processor mailbox interface between the Flexible Service Processor (FSP) and Hostboot. An attacker with authenticated service-level access to the FSP can send a crafted mailbox message to read or modify arbitrary regions of Hostboot memory. A successful attack can compromise the host firmware boot stack and the PowerVM hypervisor loaded by it, with high impact on confidentiality, integrity and availability of the managed system.
IBM · Power Systems Firmware
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a stack-based buffer overflow in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a crafted mailbox message that overflows host firmware runtime attribute storage and executes arbitrary code in the host firmware runtime. Successful exploitation gives full access to the managed system's memory and hardware interfaces, with impact on confidentiality, integrity and availability.
IBM · Power Systems Firmware
IBM Power Systems Firmware (PowerVM Hypervisor) contains a stack-based buffer overflow in the validation of host firmware boot images. An attacker with service access to the service processor can supply a maliciously crafted code update image and execute arbitrary code on the host system. IBM rates the impact as high for confidentiality, integrity and availability, with a CVSS 3.1 base score of 8.2.
IBM · Power Systems Firmware
IBM Power Systems Firmware FW1060.00 through FW1060.81 contains a stack-based buffer overflow in the service processor (FSP) mailbox interface. An attacker with authenticated service-level access to the FSP can send a crafted mailbox message that overflows host firmware runtime attribute storage and executes arbitrary code in the host firmware runtime. Successful exploitation gives full access to the managed system's memory and hardware interfaces, with high impact on confidentiality, integrity and availability.
IBM · Power Systems Firmware
IBM Maximo Application Suite - Location Service for Esri Component versions 9.0, 9.1 and 9.2 do not validate a container image reference in a Kubernetes operator template. An attacker who already holds high privileges, for example to create or modify custom resources in the cluster, can inject and execute code. The CVSS vector indicates a scope change with high confidentiality and integrity impact. No exploitation has been reported, and CISA SSVC rates exploitation as none and not automatable.
IBM · Maximo Application Suite - Location Service for Esri Component
IBM Maximo Application Suite - Location Service for Esri Component versions 9.0, 9.1 and 9.2 contain an OS command injection flaw. A user-controlled value is passed unsanitised to a shell command in a Kubernetes operator task. An attacker with existing high privileges can execute commands, with high impact on confidentiality and integrity and no direct availability impact, and the scope is changed. CISA SSVC rates exploitation as none and not automatable.
IBM · Maximo Application Suite - Location Service for Esri Component
IBM Db2 Mirror for i 7.4, 7.5 and 7.6 contains a privilege escalation flaw in the Db2 Mirror GUI (CWE-264). An authenticated attacker with a valid user account can send a crafted request that bypasses authorization and input validation checks, execute malicious code and obtain elevated privileges on the IBM i system. IBM rates the vulnerability 9.9 (Critical). Fixes are available and no exploitation is known.
IBM · Db2 Mirror for i
IBM Db2 Server 11.5.0 to 11.5.9 and 12.1.0 to 12.1.5 on Linux and Unix allows privilege escalation (CWE-269) when the db2locssh feature is enabled for a Db2 instance. A local user with low privileges can gain higher privileges, and CVSS rates the impact on confidentiality, integrity and availability as high. IBM has published security updates for the latest level of each release, and no confirmed exploitation is known.
IBM · Db2
IBM Db2 for Linux, UNIX and Windows (including DB2 Connect Server) versions 11.5.0 to 11.5.9 and 12.1.0 to 12.1.5 contain a flaw in privilege management (CWE-269). According to IBM, a local attacker who already holds DBADM authorization can gain elevated privileges. The NVD record is still awaiting analysis; the CVSS 8.8 score comes from IBM as CNA. The attack requires local access and a high database privilege, so the main risk is a compromised or malicious DBA account or chaining with another vulnerability.
IBM · Db2
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
IBM Guardium Data Protection versions 12.0, 12.1 and 12.2 contain a buffer overflow (CWE-119) in the Sniffer component. A remote attacker may be able to execute arbitrary code on the affected system. The CVE record provided lists CVSS 8.8 with low attack complexity, while the IBM bulletin lists 7.5 with high attack complexity and low privileges required; the score should be verified on NVD.
IBM · Guardium Data Protection
IBM Guardium Data Protection, a database activity monitoring and audit product, lacks authentication for a critical management function. A remote attacker without credentials can execute arbitrary management operations on the appliance. The CVSS base score is 9.8 (Critical), and the attack requires only network access to the affected interface.
IBM · Guardium Data Protection
Research and translation in progress – available shortly.
A buffer overflow (CWE-120) in IBM Guardium Data Protection versions 12.0, 12.1 and 12.2 can be triggered remotely, and IBM states that an attacker could execute arbitrary code. The flaw is in the Sniffer component, which IBM says is affected in all three versions. No authentication is required according to the NVD vector, but IBM's bulletin rates the attack complexity as high (CVSS 8.1), so the exact severity must be confirmed on NVD and in the IBM bulletin.
IBM · Guardium Data Protection
Research and translation in progress – available shortly.
IBM Guardium Data Protection versions 12.2.2 and 12.1 contain an SQL injection vulnerability (CWE-89) because special elements in SQL commands are not neutralized properly. A remote attacker can run arbitrary SQL commands without authentication or user interaction, which can affect the confidentiality, integrity and availability of the data the appliance stores. The NVD record gives a CVSS base score of 9.8 (critical), while some secondary sources list 8.1, so the higher score should be assumed until IBM confirms it.
IBM · Guardium Data Protection
