CND News and Blog

New Vulnerabilities Monday 29 April

michele654 Vulnerabilities Monday, 29 April 2024 66 Hits 0 Comments

New Alerts for Belden, Microsoft Edge, and IBM.

Belden

A vulnerability in the HTTP(S) management module of HiEOS devices could allow a remote attacker to bypass authentication for web server resources. CVSSv3 score of 9.8
More info.

Microsoft

Microsoft has updated Edge to include the latest chromium vulnerability fixes.
More info.

IBM

Multiple security vulnerabilities have been addressed in IBM Security Verify Governance - Containerized Identity Manager. Highest CVSSv3 score of 9.8
More info.

IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to SQL injection in PostgreSQL JDBC Driver. CVSSv3 score of 10.
More info.

IBM Administration Runtime Expert for i is vulnerable to attacker executing arbitrary code on the system due to Dojo. CVSSv3 score of 9.8
More info.

Multiple vulnerabilities were addressed in IBM Cloud Pak for AIOps. Highest CVSSv3 score of 9.8
More info.

IBM Cloud Pak for Network Automation addresses multiple security vulnerabilities. Highest CVSSv3 score of 9.
More info.