Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_information_queue:1.0.5:*:*:*:*:*:*:*

part: a version: 1.0.5 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Information Queue (c6e6d18e-477a-5429-ba43-334934ca8aca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4291 vulnerable 2026-06-08 05:25:59.105657 Details available
MEDIUM (4.7)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176334.
Published: 2020-04-08T14:05:46.777Z
Updated: 2024-09-16T17:08:57.690Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4290 vulnerable 2026-06-08 05:25:59.105077 Details available
MEDIUM (4.2)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user to spoof the configuration owner of any other user which disclose sensitive information or allow for unauthorized access. IBM X-Force ID: 176333.
Published: 2020-04-08T14:05:46.353Z
Updated: 2024-09-16T16:37:49.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4289 vulnerable 2026-06-08 05:25:59.104616 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 176332.
Published: 2020-04-08T14:05:45.874Z
Updated: 2024-09-16T22:55:40.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4284 vulnerable 2026-06-08 05:25:59.097010 Details available
MEDIUM (5.3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized user due to insufficient timeout functionality in the Web UI. IBM X-Force ID: 176207.
Published: 2020-04-08T14:05:45.434Z
Updated: 2024-09-16T17:29:13.761Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4282 vulnerable 2026-06-08 05:25:59.095451 Details available
LOW (3)
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow an authenticated user to perform unauthorized actions by bypassing illegal character restrictions. X-Force ID: 176205.
Published: 2020-04-08T14:05:44.995Z
Updated: 2024-09-16T23:01:57.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4164 vulnerable 2026-06-08 05:25:58.971354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.