Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:algo_one:5.0.0:*:*:*:*:*:*:*

part: a version: 5.0.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductAlgo One (ead2e46c-e184-5e6b-a21f-ddbe862880af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1155 vulnerable 2026-06-08 05:09:21.121897 Details available
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a specially crafted HTTP request. IBM Reference #: 1999754.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-05T13:25:17.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1154 vulnerable 2026-06-08 05:09:21.120873 Details available
IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application users. IBM Reference #: 1999892.
Published: 2017-03-31T18:00:00.000Z
Updated: 2024-08-05T13:25:17.299Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0390 vulnerable 2026-06-08 05:07:15.191164 Details available
Cross-site scripting (XSS) vulnerability in IBM Algorithmics Algo One Algo Risk Application (ARA) 4.9.1 through 5.1.0 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
Published: 2016-05-15T01:00:00.000Z
Updated: 2024-08-05T22:15:24.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6333 vulnerable 2026-06-08 05:04:55.955753 Details available
Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.
Published: 2014-03-05T11:00:00.000Z
Updated: 2024-08-06T17:39:00.612Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6332 vulnerable 2026-06-08 05:04:55.955374 Details available
Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it.
Published: 2014-02-06T23:00:00.000Z
Updated: 2024-08-06T17:39:00.835Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6331 vulnerable 2026-06-08 05:04:55.954960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6320 vulnerable 2026-06-08 05:04:55.916553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6319 vulnerable 2026-06-08 05:04:55.916193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6318 vulnerable 2026-06-08 05:04:55.915818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6303 vulnerable 2026-06-08 05:04:55.843310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6302 vulnerable 2026-06-08 05:04:55.842944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6301 vulnerable 2026-06-08 05:04:55.842573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6300 vulnerable 2026-06-08 05:04:55.842199 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6299 vulnerable 2026-06-08 05:04:55.841799 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5468 vulnerable 2026-06-08 05:04:51.785392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.