PS
Product
Pureapplication System
On CISA KEVExploited in the wild
10
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 2Low 0
Watch
Add Pureapplication System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 1.0.0.0 through 1.0.0.4; 1.1.0.0 through 1.1.0.4; 2.0.0.0 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 1.0.0.0 through 1.0.0.4; 1.1.0.0 through 1.1.0.4; 2.0.0.0 |
| CVE-2019-4224 | 8.8 | Jun 26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection Affected: 2.2.3.0 through 2.2.5.3 |
| CVE-2019-4241 | 7.8 | Jun 26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 could allow an authenticated user with local access to bypass authentication and obtain administrative access Affected: 2.2.3.0 through 2.2.5.3 |
| CVE-2019-4235 | 7.5 | Jun 26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user… Affected: 2.2.3.0 through 2.2.5.3 |
| CVE-2019-4225 | 4.4 | Jun 26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 stores potentially sensitive information in log files that could be read by a local user Affected: 2.2.3.0 through 2.2.5.3 |
| CVE-2019-4234 | 4.3 | Jun 26 | IBM PureApplication System 2.2.3.0 through 2.2.5.3 weakness in the implementation of locking feature in pattern editor Affected: 2.2.3.0 through 2.2.5.3 |
| CVE-2015-0235 | – | Jan 28 | Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary… Affected: 1.0.0.0; 1.1.0.0; 2.0.0.0 |
| CVE-2014-6158 | – | Jan 10 | Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and… Affected: 1.0.0.0; 1.0.0.1; 1.0.0.2; 1.0.0.3; 1.1.0.0; 1.1.0.1; +4 more |
| CVE-2014-0960 | – | Jun 14 | IBM PureApplication System 1.0 before 1.0.0.4 cfix8 and 1.1 before 1.1.0.4 IF1 allows remote authenticated users to bypass intended access restrictions by establishing an SSH… Affected: 1.0.0.0; 1.0.0.1; 1.0.0.2; 1.0.0.3; 1.0.0.4; 1.1.0.0; +4 more |
Showing 10