Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_orchestrator:2.4.0.1:*:*:*:*:*:*:*

part: a version: 2.4.0.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Orchestrator (f72a910b-1855-5b61-af81-2b09647afc0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-0206 vulnerable 2026-06-08 05:07:14.202508 Details available
IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a specially crafted and malformed URL.
Published: 2017-02-08T22:00:00.000Z
Updated: 2024-08-05T22:08:13.339Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0205 vulnerable 2026-06-08 05:07:14.202016 Details available
LOW (3.3)
A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID: 109394.
Published: 2018-08-30T16:00:00.000Z
Updated: 2024-09-17T00:40:50.241Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0204 vulnerable 2026-06-08 05:07:14.199624 Details available
Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Published: 2016-10-16T21:00:00.000Z
Updated: 2024-08-05T22:08:13.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0203 vulnerable 2026-06-08 05:07:14.195646 Details available
A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual machines in projects where the user belongs to.
Published: 2017-02-08T22:00:00.000Z
Updated: 2024-08-05T22:08:13.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0202 vulnerable 2026-06-08 05:07:14.194186 Details available
A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view any task of the current users domain.
Published: 2017-02-08T22:00:00.000Z
Updated: 2024-08-05T22:08:13.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7494 vulnerable 2026-06-08 05:07:01.152053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.