Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

TI-2022-21534 CVE-2022-43860 · GHSA-gph8-h9xc-35r4

IBM Navigator for i SQL injection

Priority LOW 21

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information they are authorized to but not while using this interface.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00506 Published 2022-12-22 No fix listed CWE-89
TI-2022-21533 CVE-2022-43859 · GHSA-ppqf-24vq-48jf

IBM Navigator for i SQL injection

Priority LOW 29

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information for an object they are authorized to but not while using this interface.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00617 Published 2022-12-22 No fix listed CWE-89
TI-2022-21532 CVE-2022-43858 · GHSA-9xjh-r99f-3c32

IBM Navigator for i information disclosure

Priority LOW 22

IBM Navigator for i 7.3, 7.4, and 7.5 could allow an authenticated user to access the file system and download files they are authorized to but not while using this interface.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01055 Published 2022-12-22 No fix listed CWE-22
TI-2022-21531 CVE-2022-43857 · GHSA-696v-j6jg-m6w8

IBM Navigator for i information disclosure

Priority LOW 22

IBM Navigator for i 7.3, 7.4 and 7.5 could allow an authenticated user to access IBM Navigator for i log files they are authorized to but not while using this interface.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01055 Published 2022-12-22 No fix listed CWE-22