Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_information_queue:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Information Queue (c6e6d18e-477a-5429-ba43-334934ca8aca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4292 vulnerable 2026-06-08 05:25:59.105996 Details available
LOW (3.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
Published: 2020-03-02T14:00:23.669Z
Updated: 2024-09-17T01:31:43.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4291 vulnerable 2026-06-08 05:25:59.105418 Details available
MEDIUM (4.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Published: 2020-04-08T14:05:46.777Z
Updated: 2024-09-16T17:08:57.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4290 vulnerable 2026-06-08 05:25:59.104955 Details available
MEDIUM (4.2)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Published: 2020-04-08T14:05:46.353Z
Updated: 2024-09-16T16:37:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4289 vulnerable 2026-06-08 05:25:59.104494 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Published: 2020-04-08T14:05:45.874Z
Updated: 2024-09-16T22:55:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4284 vulnerable 2026-06-08 05:25:59.096755 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Published: 2020-04-08T14:05:45.434Z
Updated: 2024-09-16T17:29:13.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4283 vulnerable 2026-06-08 05:25:59.096281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4282 vulnerable 2026-06-08 05:25:59.095314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4164 vulnerable 2026-06-08 05:25:58.966849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4219 vulnerable 2026-06-08 05:13:56.963410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4218 vulnerable 2026-06-08 05:13:56.962922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4217 vulnerable 2026-06-08 05:13:56.962314 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4162 vulnerable 2026-06-08 05:13:56.904741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4161 vulnerable 2026-06-08 05:13:56.902373 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.