Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_information_queue:1.0.0:*:*:*:*:*:*:*

part: a version: 1.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Information Queue (c6e6d18e-477a-5429-ba43-334934ca8aca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4292 vulnerable 2026-06-08 05:25:59.106023 Details available
LOW (3.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
Published: 2020-03-02T14:00:23.669Z
Updated: 2024-09-17T01:31:43.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4291 vulnerable 2026-06-08 05:25:59.105446 Details available
MEDIUM (4.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Published: 2020-04-08T14:05:46.777Z
Updated: 2024-09-16T17:08:57.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4290 vulnerable 2026-06-08 05:25:59.104986 Details available
MEDIUM (4.2)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Published: 2020-04-08T14:05:46.353Z
Updated: 2024-09-16T16:37:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4289 vulnerable 2026-06-08 05:25:59.104524 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Published: 2020-04-08T14:05:45.874Z
Updated: 2024-09-16T22:55:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4284 vulnerable 2026-06-08 05:25:59.096791 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Published: 2020-04-08T14:05:45.434Z
Updated: 2024-09-16T17:29:13.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4283 vulnerable 2026-06-08 05:25:59.096319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4282 vulnerable 2026-06-08 05:25:59.095353 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4164 vulnerable 2026-06-08 05:25:58.967741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4219 vulnerable 2026-06-08 05:13:56.963442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4218 vulnerable 2026-06-08 05:13:56.962959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4217 vulnerable 2026-06-08 05:13:56.962348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4162 vulnerable 2026-06-08 05:13:56.904868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4161 vulnerable 2026-06-08 05:13:56.903063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.