Vendor
IBM
6,576 known vulnerabilities.
Products
API Connect 287
AIX 217
i 214
WebSphere Application Server 188
DB2 for Linux, UNIX and Windows 182
Langflow OSS 177
InfoSphere Information Server 152
PowerVM VIOS 146
Sterling B2B Integrator 138
Rational Collaborative Lifecycle Management 131
Rational Quality Manager 126
MQ 117
QRadar SIEM 113
Security Guardium 106
Cognos Analytics 105
Guardium Data Protection 97
Rational DOORS Next Generation 96
Security Verify Access 93
Maximo Asset Management 86
WebSphere Application Server - Liberty 86
Rational Engineering Lifecycle Manager 76
Rational Team Concert 72
Sterling File Gateway 71
DataStage on Cloud Pak for Data 66
Security Verify Access Container 65
Concert 64
Verify Identity Access 59
Verify Identity Access Container 59
Security Key Lifecycle Manager 57
Db2 56
Cloud Pak for Security 55
Cognos Controller 52
Engineering Lifecycle Optimization 52
UrbanCode Deploy 52
Spectrum Protect Plus 49
Spectrum Scale 48
Engineering Workflow Management 48
Rational Rhapsody Design Manager 47
Financial Transaction Manager (FTM) for RedHat OpenShift 46
Robotic Process Automation 45
3,718 results · Clear filters · Feed
-
Medium 6.5
IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in …
-
Medium 4.9
IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would …
-
Medium 4.8
IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…
-
Medium 5.5
IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a C…
-
Medium 4.3
OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Manage…
-
Medium 6.5
An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9…
-
Medium 5.9
IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which le…
-
Medium 5.4
A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulner…
-
Medium 5.3
A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a rem…
-
Medium 5.4
An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling…
-
Medium 6.5
A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, whic…
-
Medium 5.3
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive usi…
-
Medium 5.3
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive usi…
-
Medium 5.3
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive usi…
-
Medium 6.3CVE-2020-4280 EPSS 69%
IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by insecu…
-
Medium 5.9
IBM MQ Appliance (IBM DataPower Gateway 10.0.0.0 and 2018.4.1.0 through 2018.4.1.12) could allow a local user, under sp…
-
Medium 6.1
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to emb…
-
Medium 5.3
IBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive i…
-
Medium 6.1
IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By pe…
-
Medium 5.3
IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a …
-
Medium 5.9
IBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or cryptographic key, which it u…
-
Medium 5.3
IBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be read by an authenticated…
-
Medium 5.5
IBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due to improper input val…
-
Medium 5.3
IBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially craft…
-
Medium 5.4
IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…
-
Medium 5.9
IBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could allow an attacker to d…
-
Medium 4.3
IBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive information using a specially …
-
Medium 6.1
IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed a…
-
Medium 5.3
IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server …
-
Medium 4.3
IBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on authorization tokens or sess…
-
Medium 6.8
IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing attacks, using a tabnabbi…
-
Medium 4.3
A cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter Advanced Management Mo…
-
Medium 6.3
A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Manage…
-
Medium 5.4
IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site …
-
Medium 6.5
IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An…
-
Medium 4.3
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which could allow an attacker t…
-
Medium 4.0
IBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally which can be read by a…
-
Medium 6.3
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection. A remote attacker could send specially-craf…
-
Medium 5.4
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Medium 6.4
IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to store…