Skip to content
OpenAdvisories

Vendor

IBM

6,576 known vulnerabilities.

Products

API Connect 287 AIX 217 i 214 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 66 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45
All Critical High Medium Low Exploited only Public exploit

3,718 results · Clear filters · Feed

  • Medium 5.9
    CVE-2019-4667

    IBM UrbanCode Deploy (UCD) 7.0.5.2 could allow a remote attacker to obtain sensitive information, caused by the failure…

    IBM UrbanCode Deploy
  • Medium 4.3
    CVE-2020-4430 Exploited EPSS 69%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directorie…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Medium 4.3
    CVE-2020-4446

    IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote …

    IBM Business Automation Workflow Business Process Manager Standard
  • Medium 5.0
    CVE-2020-4421

    IBM WebSphere Application Liberty 19.0.0.5 through 20.0.0.4 could allow an authenticated user using openidconnect to sp…

    IBM WebSphere Application Server - Liberty
  • Medium 5.4
    CVE-2020-4384

    IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows…

    IBM InfoSphere Information Server
  • Medium 5.4
    CVE-2020-4209

    IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An…

    IBM Spectrum Protect Plus
  • Medium 4.3
    CVE-2019-4286

    IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authe…

    IBM Maximo Anywhere
  • Medium 4.3
    CVE-2019-4288

    IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authe…

    IBM Maximo Anywhere
  • Medium 4.3
    CVE-2020-4329

    IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authent…

    IBM WebSphere Application Server WebSphere Application Server - Liberty
  • Medium 4.3
    CVE-2019-4729

    IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed techni…

    IBM Cognos Analytics
  • Medium 5.3
    CVE-2020-4267

    IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a m…

    IBM MQ Appliance
  • Medium 5.3
    CVE-2019-4751

    IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacke…

    IBM Cloud App Management
  • Medium 4.3
    CVE-2019-4750

    IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacke…

    IBM Cloud App Management
  • Medium 4.6
    CVE-2020-4353

    IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the use…

    IBM MaaS360
  • Medium 5.0
    CVE-2020-4202

    IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the ser…

    IBM UrbanCode Deploy
  • Medium 6.2
    CVE-2019-4668

    IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IB…

    IBM UrbanCode Deploy
  • Medium 5.3
    CVE-2020-4277

    IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 discloses sensitive information in error messages that could aid an at…

    IBM TRIRIGA Application Platform
  • Medium 5.4
    CVE-2019-4749

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 6.1
    CVE-2019-4644

    IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…

    IBM Maximo Asset Management
  • Medium 5.4
    CVE-2019-4446

    IBM Maximo Asset Management 7.6 could allow an authenticated user perform actions they are not authorized to by modifyi…

    IBM Maximo Asset Management
  • Medium 5.1
    CVE-2020-4338

    IBM MQ 9.1.4 could allow a local attacker to obtain sensitive information by inclusion of sensitive data within runmqra…

    IBM MQ
  • Medium 5.9
    CVE-2019-4762

    IBM MQ 9.0 and 9.1 is vulnerable to a denial of service attack due to an error in the Channel processing function. IBM …

    IBM MQ
  • Medium 6.3
    CVE-2020-4294

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated …

    IBM QRadar
  • Medium 5.4
    CVE-2020-4274

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due…

    IBM QRadar
  • Medium 6.3
    CVE-2020-4271

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be …

    IBM QRadar
  • Medium 5.5
    CVE-2020-4272

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could sen…

    IBM QRadar
  • Medium 5.4
    CVE-2020-4268

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

    IBM QRadar
  • Medium 5.9
    CVE-2019-4594

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure …

    IBM QRadar
  • Medium 4.3
    CVE-2019-4593

    IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in …

    IBM QRadar
  • Medium 6.5
    CVE-2020-4151

    IBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improp…

    IBM QRadar SIEM
  • Medium 4.7
    CVE-2020-4291

    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information…

    IBM Security Information Queue
  • Medium 4.2
    CVE-2020-4290

    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow any authenticated user t…

    IBM Security Information Queue
  • Medium 5.3
    CVE-2020-4284

    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information…

    IBM Security Information Queue
  • Medium 5.3
    CVE-2020-4289

    IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could allow a remote attacker to obt…

    IBM Security Information Queue
  • Medium 5.4
    CVE-2020-4252

    IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability …

    IBM Rational DOORS Next Generation
  • Medium 5.4
    CVE-2019-4740

    IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability …

    IBM Rational DOORS Next Generation
  • Medium 5.4
    CVE-2019-4746

    IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability …

    IBM Rational DOORS Next Generation
  • Medium 4.3
    CVE-2019-4603

    IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST…

    IBM Rational Quality Manager
  • Medium 5.4
    CVE-2019-4737

    IBM DOORS Next Generation (DNG/RRC) 6.0.2. 6.0.6, and 6.0.61 is vulnerable to cross-site scripting. This vulnerability …

    IBM Rational DOORS Next Generation
  • Medium 4.3
    CVE-2019-4601

    IBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to obtain sensitive information fro…

    IBM Rational Quality Manager