Cloud Orchestrator

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:cloud_orchestrator:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductCloud Orchestrator (f72a910b-1855-5b61-af81-2b09647afc0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-4461 vulnerable 2026-06-08 05:13:57.216203 Details available
MEDIUM (5.4)
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain sensitive information. IBM X-Force ID: 163682.
Published: 2019-10-25T16:30:37.444Z
Updated: 2024-09-17T00:05:28.708Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4459 vulnerable 2026-06-08 05:13:57.215432 Details available
MEDIUM (5.4)
IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163656.
Published: 2019-10-24T12:00:38.679Z
Updated: 2024-09-16T20:01:37.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4400 vulnerable 2026-06-08 05:13:57.126720 Details available
MEDIUM (4.3)
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162261.
Published: 2019-10-25T16:30:37.011Z
Updated: 2024-09-17T01:36:18.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4399 vulnerable 2026-06-08 05:13:57.126102 Details available
MEDIUM (5.9)
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 162260.
Published: 2019-10-25T16:30:36.509Z
Updated: 2024-09-16T23:42:07.551Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4398 vulnerable 2026-06-08 05:13:57.125688 Details available
MEDIUM (4)
IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM X-Force ID: 162259.
Published: 2019-10-24T12:00:38.147Z
Updated: 2024-09-17T02:36:56.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4397 vulnerable 2026-06-08 05:13:57.123710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4396 vulnerable 2026-06-08 05:13:57.123210 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4395 vulnerable 2026-06-08 05:13:57.122750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4394 vulnerable 2026-06-08 05:13:57.120932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0205 vulnerable 2026-06-08 05:07:14.201131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.