IBM Cloud Orchestrator vulnerabilities

15 CVEs affecting IBM Cloud Orchestrator, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-4461, published 2019-10-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-4400, published 2019-10-25. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request…
CVE-2016-0204, published 2016-10-16. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified…
CVE-2019-4397, published 2019-10-24. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 stores sensitive information in URL parameters. This may lead to information disclosure if…
CVE-2019-4399, published 2019-10-25. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force…
CVE-2019-4396, published 2019-10-25. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could…
CVE-2019-4461, published 2019-10-25. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further…
CVE-2019-4459, published 2019-10-24. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…
CVE-2016-0205, published 2018-08-30. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in IBM Cloud Orchestrator 2.3, 2.3.0.1, 2.4, and 2.4.0.1 that could allow an attacker after authentication to enumerate valid users of the system. IBM X-Force ID:…
CVE-2016-0203, published 2017-02-08. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in the IBM Cloud Orchestrator task API. The task API might allow an authenticated user to view background information associated with actions performed on virtual…
CVE-2016-0202, published 2017-02-08. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud Orchestrator. It is possible for an authenticated user to view…

Latest

CVE-2019-4395, published 2019-10-25. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a local user to obtain sensitive information from temporary script files. IBM X-Force ID: 162333.
CVE-2019-4394, published 2019-10-25. Low severity, CVSS 2.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 contain APIs that could be used by a local user to send email. IBM X-Force ID: 162232.
CVE-2019-4398, published 2019-10-24. Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 could allow a local user to obtain sensitive information from SessionManagement cookies. IBM…