i

214 results · Feed

• Medium 6.4
  CVE-2023-23470

  IBM i privilege escalation

  IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a result of improper SQL processing. By using a specially crafted SQL operation, the administrator could exploit t…

  IBM i
  May 4, 2023
• High 7.2
  CVE-2022-40746

  IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execu…

  IBM i
  Nov 21, 2022
• Medium 5.4
  CVE-2022-34358

  IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

  IBM i
  Jul 13, 2022
• Medium 6.3
  CVE-2022-22495

  IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, …

  IBM i
  May 24, 2022
• Low 3.7
  CVE-2022-22481

  IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web inte…

  IBM i
  May 9, 2022
• Medium 6.5
  CVE-2021-39056

  The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to…

  IBM i
  Jan 13, 2022
• Medium 6.1
  CVE-2021-38876

  IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

  IBM i
  Dec 30, 2021
• Medium 5.9
  CVE-2021-20501

  IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to t…

  IBM i
  Apr 21, 2021
• Low 2.9
  CVE-2020-4345

  IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local us…

  IBM i
  May 17, 2020
• Medium 6.1
  CVE-2019-4450

  IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

  IBM i
  Nov 9, 2019
• Medium 6.7
  CVE-2019-4536

  IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror …

  IBM i
  Aug 29, 2019
• Medium 5.9
  CVE-2019-4381

  IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced nod…

  IBM i
  Jun 14, 2019
• Medium 6.1
  CVE-2019-4040

  IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

  IBM i
  Jan 31, 2019
• Unscored —
  CVE-2017-1460

  IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a…

  IBM i
  Jul 31, 2017