IBM i2 Analysts Notebook vulnerabilities

29 CVEs affecting IBM i2 Analysts Notebook, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-39050, published 2021-12-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4343, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted…
CVE-2020-4468, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted…
CVE-2020-4467, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by memory corruption. By persuading a victim to open a specially-crafted…
CVE-2020-4422, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially crafted…
CVE-2020-4288, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a…
CVE-2020-4287, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a…
CVE-2020-4285, published 2020-05-14. High severity, CVSS 7.8. EPSS: 2.8% chance of exploitation in the next 30 days. IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error. By persuading a victim to open a…
CVE-2020-4724, published 2020-10-29. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…
CVE-2020-4723, published 2020-10-29. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…
CVE-2020-4722, published 2020-10-29. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…

Latest

CVE-2021-39050, published 2021-12-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level…
CVE-2021-39049, published 2021-12-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and gain lower level…
CVE-2021-29767, published 2021-07-26. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This…
CVE-2021-20431, published 2021-07-26. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID:…
CVE-2020-4721, published 2020-10-29. High severity, CVSS 7.8. EPSS: 1.5% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…
CVE-2020-4554, published 2020-08-03. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…
CVE-2020-4553, published 2020-08-03. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file,…