Skip to content
OpenAdvisories

Product · IBM

i

214 known vulnerabilities.

214 results · Feed

  • Medium 5.3

    IBM i is Affected By Denial of Service Vulnerabilities in Line Printer Daemon [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.

    IBM i
  • Medium 4.4

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.

    IBM i
  • Medium 4.4

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to inject parameters into a CL command due to improper neutralization of special elements.

    IBM i
  • Medium 4.3

    IBM i is Affected By Denial of Service Vulnerability in Save Restore []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow.

    IBM i
  • Medium 4.3

    IBM i is Affected By Multiple Vulnerabilities in Debug Server

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a memory leak.

    IBM i
  • High 8.1

    IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher.

    IBM i
  • High 8.1

    IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized access due to improper validation of client-supplied authentication parameters.

    IBM i
  • Medium 6.3

    IBM i is Affected By Buffer Overflow Vulnerability []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow.

    IBM i
  • Low 3.3

    IBM i is Affected By Obtaining Sensitive Information Vulnerability in OpenSSH []

    IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain information from a privileged file when using SSH.

    IBM i
  • Medium 6.5

    IBM i is Affected By Sensitive Information Exposure Vulnerability in PASE []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sensitive information in PASE. An attacker could exploit this vulnerability to access information about process they shouldn't be permitted to access.

    IBM i
  • Medium 5.4

    IBM i Denial of Service

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read.

    IBM i
  • Low 3.5

    IBM i Buffer Overflow

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking.

    IBM i
  • Medium 6.5

    IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities.

    IBM i
  • Medium 6.5

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing. The attacker could exploit this vulnerability to cause a temporary den…

    IBM i
  • High 7.3

    IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment. A local attacker could overflow a fixed-l…

    IBM i
  • High 8.2

    IBM i is Affected By A Prvilege Escalation Vulnerability []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated pri…

    IBM i
  • High 8.4

    IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses.

    IBM i
  • High 8.9

    IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses.

    IBM i
  • High 8.8

    IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps.

    IBM i
  • Medium 4.5

    IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking.

    IBM i
  • High 7.5

    IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.

    IBM i
  • Medium 4.3

    IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.

    IBM i
  • High 8.6

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.

    IBM i
  • Medium 4.8

    IBM i Is Affected By Multiple Vulnerabilities in IBM Java SDK and IBM Java Runtime

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write.

    IBM i
  • Medium 4.4

    IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management.

    IBM i
  • Medium 6.5

    IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens.

    IBM i
  • High 8.2

    IBM i is Affected By a Denial of Service in HTTP Server []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.

    IBM i
  • Medium 5.4

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in NetServer

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.

    IBM i
  • High 8.3

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication.

    IBM i
  • High 7.3

    IBM i is Affected By Multiple Vulnerabilities in Navigator for i

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication.

    IBM i
  • Medium 4.3

    IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.

    IBM i
  • Medium 5.3

    IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable.

    IBM i
  • Medium 5.3

    IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests.

    IBM i
  • Low 3.1

    IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management.

    IBM i
  • Low 2.7

    IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager

    IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

    IBM i