CO
Product
Cloud Orchestrator
15
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 7Low 7
Watch
Add Cloud Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-4395 | 3.3 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
| CVE-2019-4398 | 3.3 | Oct 24 | IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from… Affected: 2.4 through 2.4.0.5; 2.5 through 2.5.0.9 |
| CVE-2016-0205 | 3.3 | Aug 30 | A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the… Affected: 2.3.0.0; 2.3.0.1; 2.4.0.0; 2.4.0.1 |
| CVE-2016-0206 | 3.3 | Feb 8 | IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL Affected: 2.3; 2.3.0.1; 2.4; 2.4.0.1; 2.4.0.2 |
| CVE-2016-0202 | 3.3 | Feb 8 | A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator Affected: 2.3; 2.3.0.1; 2.4; 2.4.0.1; 2.4.0.2; 2.4.0.3 |
| CVE-2015-7494 | 2.8 | Feb 8 | A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API Affected: 2.4; 2.4.0.1; 2.4.0.2; 2.4.0.3; 2.5; 2.5.01 |
| CVE-2019-4394 | 2.3 | Oct 25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email Affected: 2.4.0.0 through 2.4.0.5; 2.4.0.0 through 2.4.0.5; 2.5.0.0 through 2.5.0.9; 2.5.0.0 through 2.5.0.9 |
Showing 7