Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_information_queue:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Information Queue (c6e6d18e-477a-5429-ba43-334934ca8aca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4292 vulnerable 2026-06-08 05:25:59.106077 Details available
LOW (3.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, and 1.0.4 uses a cross-domain policy file that includes domains that should not be trusted which could disclose sensitive information. IBM X-Force ID: 176335.
Published: 2020-03-02T14:00:23.669Z
Updated: 2024-09-17T01:31:43.740Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4291 vulnerable 2026-06-08 05:25:59.105501 Details available
MEDIUM (4.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Published: 2020-04-08T14:05:46.777Z
Updated: 2024-09-16T17:08:57.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4290 vulnerable 2026-06-08 05:25:59.105045 Details available
MEDIUM (4.2)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Published: 2020-04-08T14:05:46.353Z
Updated: 2024-09-16T16:37:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4289 vulnerable 2026-06-08 05:25:59.104583 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Published: 2020-04-08T14:05:45.874Z
Updated: 2024-09-16T22:55:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4284 vulnerable 2026-06-08 05:25:59.096973 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Published: 2020-04-08T14:05:45.434Z
Updated: 2024-09-16T17:29:13.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4283 vulnerable 2026-06-08 05:25:59.096376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4282 vulnerable 2026-06-08 05:25:59.095416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4164 vulnerable 2026-06-08 05:25:58.969926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.