Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:algo_one:4.9.1:*:*:*:*:*:*:*

part: a version: 4.9.1 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAlgo One (ead2e46c-e184-5e6b-a21f-ddbe862880af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1155 vulnerable 2026-06-08 05:09:21.121874 Details available
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-05T13:25:17.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1154 vulnerable 2026-06-08 05:09:21.120111 Details available
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference #: 1999892.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-05T13:25:17.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0390 vulnerable 2026-06-08 05:07:15.190591 Details available
Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-05-15T01:00:00.000Z
Updated: 2024-08-05T22:15:24.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6333 vulnerable 2026-06-08 05:04:55.955735 Details available
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:00.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6332 vulnerable 2026-06-08 05:04:55.955358 Details available
Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it.
Published: 2014-02-06T23:00:00.000Z
Updated: 2024-08-06T17:39:00.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6331 vulnerable 2026-06-08 05:04:55.954944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6320 vulnerable 2026-06-08 05:04:55.916537 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6319 vulnerable 2026-06-08 05:04:55.916175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6318 vulnerable 2026-06-08 05:04:55.915801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6304 vulnerable 2026-06-08 05:04:55.843711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6303 vulnerable 2026-06-08 05:04:55.843295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6302 vulnerable 2026-06-08 05:04:55.842927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6301 vulnerable 2026-06-08 05:04:55.842556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6300 vulnerable 2026-06-08 05:04:55.842182 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6299 vulnerable 2026-06-08 05:04:55.841780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5468 vulnerable 2026-06-08 05:04:51.784866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.