IBM Algorithmics
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:algorithmics:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Algorithmics (d2ae7eb5-ffce-57eb-8849-d4496a815e8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-0894 |
vulnerable | 2026-06-08 05:05:14.980522 |
Details available
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and DbPass fields in an XML document.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.276Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0871 |
vulnerable | 2026-06-08 05:05:14.770768 |
Details available
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to obtain potentially sensitive Tomcat stack-trace information via non-printing characters in a cookie to the /classes/ URI, as demonstrated by the \x00 character.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.149Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0870 |
vulnerable | 2026-06-08 05:05:14.770389 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to inject arbitrary web script or HTML via (1) the Message parameter to rcore6/main/showerror.jsp, (2) the ButtonsetClass parameter to rcore6/main/buttonset.jsp, (3) the MBName parameter to rcore6/frameset.jsp, (4) the Init parameter to algopds/rcore6/main/browse.jsp, or the (5) Name, (6) StoreName, or (7) STYLESHEET parameter to algopds/rcore6/main/ibrowseheader.jsp.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.264Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0869 |
vulnerable | 2026-06-08 05:05:14.769987 |
Details available
The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics does not require a key, which makes it easier for remote attackers to obtain cleartext passwords by sniffing the network and then providing a string argument to this function.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.174Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0868 |
vulnerable | 2026-06-08 05:05:14.769633 |
Details available
RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass intended dual-control restrictions and modify data via a crafted XML document, as demonstrated by manipulation of read-only limit data.
Published: 2014-07-07T10:00:00.000Z
Updated: 2024-08-06T09:27:20.301Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0867 |
vulnerable | 2026-06-08 05:05:14.769254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0866 |
vulnerable | 2026-06-08 05:05:14.768870 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-0865 |
vulnerable | 2026-06-08 05:05:14.768401 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.