Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:datacap:9.1.9:*:*:*:*:*:*:*
part: a version: 9.1.9 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Datacap (1d65f545-5a9d-57ad-afd8-5aafb79b60a0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9610 |
vulnerable | 2026-07-29 01:12:09.327229 |
Multiple Vulnerabilities in IBM Datacap
LOW (2.3)
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.
Published: 2026-06-22T14:22:34.095Z
Updated: 2026-06-22T15:58:05.511Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8636 |
vulnerable | 2026-07-29 01:09:06.063337 |
Multiple Vulnerabilities in IBM Datacap
MEDIUM (5.5)
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory. Attacker can use the same keys to decrypt password, gain access to the application and access sensitive data in the database.
Published: 2026-06-22T14:16:01.647Z
Updated: 2026-06-22T16:07:09.938Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8059 |
vulnerable | 2026-07-29 01:09:05.486829 |
Multiple Vulnerabilities in IBM Datacap
MEDIUM (6.1)
IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2026-06-22T14:13:53.658Z
Updated: 2026-06-22T17:47:36.160Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36027 |
vulnerable | 2026-06-08 07:21:00.481509 |
IBM Datacap clickjacking
MEDIUM (5.4)
IBM Datacap 9.1.7, 9.1.8, and 9.1.9
could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.
Published: 2025-06-28T00:51:07.042Z
Updated: 2025-08-24T11:39:15.170Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-36026 |
vulnerable | 2026-06-08 07:21:00.479754 |
IBM Datacap information disclosure
MEDIUM (4.3)
IBM Datacap 9.1.7, 9.1.8, and 9.1.9
does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic.
Published: 2025-06-28T00:49:54.932Z
Updated: 2025-08-24T11:38:32.866Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39741 |
vulnerable | 2026-06-08 06:41:51.485273 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39740 |
vulnerable | 2026-06-08 06:41:51.484785 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39739 |
vulnerable | 2026-06-08 06:41:51.484275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39737 |
vulnerable | 2026-06-08 06:41:51.483580 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39736 |
vulnerable | 2026-06-08 06:41:51.482935 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39735 |
vulnerable | 2026-06-08 06:41:51.482340 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39734 |
vulnerable | 2026-06-08 06:41:51.481833 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39733 |
vulnerable | 2026-06-08 06:41:51.481056 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39732 |
vulnerable | 2026-06-08 06:41:51.480534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39731 |
vulnerable | 2026-06-08 06:41:51.479870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39730 |
vulnerable | 2026-06-08 06:41:51.479325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39729 |
vulnerable | 2026-06-08 06:41:51.478841 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39728 |
vulnerable | 2026-06-08 06:41:51.478026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.