Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_information_queue:1.0.2:*:*:*:*:*:*:*

part: a version: 1.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Information Queue (c6e6d18e-477a-5429-ba43-334934ca8aca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4292 vulnerable 2026-06-08 05:25:59.106060 Details available
LOW (3.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
Published: 2020-03-02T14:00:23.669Z
Updated: 2024-09-17T01:31:43.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4291 vulnerable 2026-06-08 05:25:59.105484 Details available
MEDIUM (4.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Published: 2020-04-08T14:05:46.777Z
Updated: 2024-09-16T17:08:57.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4290 vulnerable 2026-06-08 05:25:59.105027 Details available
MEDIUM (4.2)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Published: 2020-04-08T14:05:46.353Z
Updated: 2024-09-16T16:37:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4289 vulnerable 2026-06-08 05:25:59.104564 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Published: 2020-04-08T14:05:45.874Z
Updated: 2024-09-16T22:55:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4284 vulnerable 2026-06-08 05:25:59.096952 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Published: 2020-04-08T14:05:45.434Z
Updated: 2024-09-16T17:29:13.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4283 vulnerable 2026-06-08 05:25:59.096358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4282 vulnerable 2026-06-08 05:25:59.095397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4164 vulnerable 2026-06-08 05:25:58.969109 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4219 vulnerable 2026-06-08 05:13:56.963484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4218 vulnerable 2026-06-08 05:13:56.963089 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4217 vulnerable 2026-06-08 05:13:56.962488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4162 vulnerable 2026-06-08 05:13:56.904914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4161 vulnerable 2026-06-08 05:13:56.904306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.