IBM Algorithmics vulnerabilities

8 CVEs affecting IBM Algorithmics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0894, published 2014-07-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0871, published 2014-07-07. Medium severity, CVSS 4.3. EPSS: 5.7% chance of exploitation in the next 30 days. RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to obtain potentially sensitive Tomcat stack-trace information via…
CVE-2014-0869, published 2014-07-07. Medium severity, CVSS 4.3. EPSS: 5.5% chance of exploitation in the next 30 days. The decrypt function in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics does not require a key, which makes it easier for remote attackers to…
CVE-2014-0866, published 2014-07-07. Medium severity, CVSS 4.3. EPSS: 5.5% chance of exploitation in the next 30 days. RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics sends cleartext credentials over HTTP, which allows remote attackers to obtain sensitive…
CVE-2014-0867, published 2014-07-07. Medium severity, CVSS 5.8. EPSS: 5.1% chance of exploitation in the next 30 days. rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cookies via the query…
CVE-2014-0865, published 2014-07-07. Medium severity, CVSS 4.9. EPSS: 5% chance of exploitation in the next 30 days. RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass…
CVE-2014-0868, published 2014-07-07. Medium severity, CVSS 4.9. EPSS: 4.3% chance of exploitation in the next 30 days. RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics relies on client-side input validation, which allows remote authenticated users to bypass…
CVE-2014-0894, published 2014-07-07. Low severity, CVSS 3.5. EPSS: 4% chance of exploitation in the next 30 days. RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows context-dependent attackers to discover database credentials by reading the DbUser and…
CVE-2014-0870, published 2014-07-07. Medium severity, CVSS 4.3. EPSS: 3.7% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allow remote attackers to inject…