IBM I2 Ibase
4 CVEs affecting IBM I2 Ibase. Latest disclosed: 2021-10-27. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-4588 | High | 7.8 | 2020-10-30 | IBM i2 iBase 8.9.13 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution… |
CVE-2020-4584 | High | 7.5 | 2020-10-30 | IBM i2 iBase 8.9.13 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This info… |
CVE-2020-4623 | Medium | 6.5 | 2021-07-26 | IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a… |
CVE-2021-29868 | Medium | 5.5 | 2021-10-27 | IBM i2 iBase 8.9.13 and 9.0.0 could allow a local attacker to obtain sensitive information due to insufficient session expiration. IBM X-Force ID: 206213. |