Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:observability_with_instana:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductObservability With Instana (4e080216-1d4a-5ea2-be6e-73dcd7c4deb9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-37404 vulnerable 2026-06-08 06:08:15.240022 IBM Observability with Instana code execution
MEDIUM (6.4)
IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.
Published: 2023-10-04T01:17:44.404Z
Updated: 2024-09-19T19:26:57.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27290 vulnerable 2026-06-08 05:57:40.801189 IBM Observability with Instana missing authentication
CRITICAL (9.1)
Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.
Published: 2023-03-03T22:36:06.445Z
Updated: 2025-03-05T16:01:17.049Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.