| CVE-2021-38915 |
IBM Data Risk Manager 2.0.6 stores user credentials in plain clear text which can be read by an authenticated user
|
5.3
Medium
|
Oct 12, 2021 |
| CVE-2021-38862 |
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Oct 12, 2021 |
| CVE-2020-4622 |
IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it…
|
5.9
Medium
|
Sep 22, 2020 |
| CVE-2020-4621 |
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due…
|
8.8
High
|
Sep 22, 2020 |
| CVE-2020-4620 |
IBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload arbitrary files, caused by…
|
8.8
High
|
Sep 22, 2020 |
| CVE-2020-4618 |
IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input…
|
5.5
Medium
|
Sep 22, 2020 |
| CVE-2020-4619 |
IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an…
|
5.3
Medium
|
Sep 22, 2020 |
| CVE-2020-4617 |
IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow an attacker to…
|
7.1
High
|
Sep 22, 2020 |
| CVE-2020-4616 |
IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially…
|
5.3
Medium
|
Sep 22, 2020 |
| CVE-2020-4615 |
IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting
|
5.4
Medium
|
Sep 22, 2020 |
| CVE-2020-4614 |
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
3.7
Low
|
Sep 22, 2020 |
| CVE-2020-4613 |
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to…
|
5.9
Medium
|
Sep 22, 2020 |
| CVE-2020-4612 |
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially…
|
4.3
Medium
|
Sep 22, 2020 |
| CVE-2020-4611 |
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and execute actions reserved for…
|
8.8
High
|
Sep 22, 2020 |
| CVE-2020-4430 |
Exploited
IBM Data Risk Manager Directory Traversal Vulnerability
|
4.3
Medium
|
May 7, 2020 |
| CVE-2020-4429 |
IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM…
|
10.0
Critical
|
May 7, 2020 |
| CVE-2020-4428 |
Exploited
IBM Data Risk Manager Remote Code Execution Vulnerability
|
9.1
Critical
|
May 7, 2020 |
| CVE-2020-4427 |
Exploited
IBM Data Risk Manager Security Bypass Vulnerability
|
9.0
Critical
|
May 7, 2020 |