CO
Product
Cloud Orchestrator
15
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 7
Watch
Add Cloud Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4399 | 7.5 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2016-0204 | 6.8 | Oct 16 | Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing… Affected: 2.4.0.0; 2.4.0.1; 2.4.0.2 |
| CVE-2019-4397 | 6.5 | Oct 24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters Affected: 2.4 through 2.4.0.5; 2.5 through 2.5.0.9 |
| CVE-2016-0203 | 5.5 | Feb 8 | A vulnerability has been identified in the IBM Cloud Orchestrator task API Affected: 2.4; 2.4.0.1; 2.4.0.2; 2.4.0.3; 2.5; 2.5.01 |
| CVE-2019-4461 | 5.4 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2019-4396 | 5.4 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2019-4459 | 5.4 | Oct 24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting Affected: 2.4 through 2.4.0.5; 2.4 through 2.4.0.5; 2.5 through 2.5.0.9; 2.5 through 2.5.0.9 |
| CVE-2019-4400 | 4.3 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2019-4395 | 3.3 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2019-4398 | 3.3 | Oct 24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from… Affected: 2.4 through 2.4.0.5; 2.5 through 2.5.0.9 |
| CVE-2016-0205 | 3.3 | Aug 30 | A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the… Affected: 2.3.0.0; 2.3.0.1; 2.4.0.0; 2.4.0.1 |
| CVE-2016-0206 | 3.3 | Feb 8 | IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL Affected: 2.3; 2.3.0.1; 2.4; 2.4.0.1; 2.4.0.2 |
| CVE-2016-0202 | 3.3 | Feb 8 | A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator Affected: 2.3; 2.3.0.1; 2.4; 2.4.0.1; 2.4.0.2; 2.4.0.3 |
| CVE-2015-7494 | 2.8 | Feb 8 | A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API Affected: 2.4; 2.4.0.1; 2.4.0.2; 2.4.0.3; 2.5; 2.5.01 |
| CVE-2019-4394 | 2.3 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
Showing 15