Skip to content

Known vulnerabilities in IBM Cloud Orchestrator

Is your version affected?

CVE Summary Score Published
CVE-2019-4461 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by… 5.4 Medium Oct 25, 2019
CVE-2019-4400 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories… 4.3 Medium Oct 25, 2019
CVE-2019-4399 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms… 5.9 Medium Oct 25, 2019
CVE-2019-4396 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks,… 5.4 Medium Oct 25, 2019
CVE-2019-4395 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive… 4.0 Medium Oct 25, 2019
CVE-2019-4394 IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to… 2.3 Low Oct 25, 2019
CVE-2019-4459 IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable… 5.4 Medium Oct 24, 2019
CVE-2019-4398 IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a… 4.0 Medium Oct 24, 2019
CVE-2019-4397 IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores… 5.3 Medium Oct 24, 2019
CVE-2016-0205 A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an… 3.3 Low Aug 30, 2018

Other IBM products