Skip to content
OpenAdvisories

Vendor

IBM

6,576 known vulnerabilities.

Products

API Connect 287 AIX 217 i 214 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 66 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45
All Critical High Medium Low Exploited only Public exploit

6,576 results · Feed

  • Medium 5.4
    CVE-2021-29841

    IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

    IBM Financial Transaction Manager
  • Low 3.7
    CVE-2021-20582

    IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disc…

    IBM Security Secret Server
  • Medium 5.3
    CVE-2021-20569

    IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. …

    IBM Security Secret Server
  • Low 2.7
    CVE-2021-20508

    IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed tec…

    IBM Security Secret Server
  • Medium 4.3
    CVE-2021-29853

    IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the retur…

    IBM Planning Analytics Local
  • Medium 5.4
    CVE-2021-29852

    IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja…

    IBM Planning Analytics Local
  • Medium 4.3
    CVE-2021-29851

    IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned…

    IBM Planning Analytics Local
  • High 8.8
    CVE-2021-29907

    IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary c…

    IBM OpenPages with Watson
  • Medium 6.4
    CVE-2021-29743

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows use…

    IBM Maximo Asset Management
  • Medium 4.9
    CVE-2021-29728

    IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cry…

    IBM Sterling Secure Proxy
  • Medium 5.9
    CVE-2021-29723

    IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that co…

    IBM Sterling Secure Proxy
  • Medium 5.9
    CVE-2021-29722

    IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that co…

    IBM Sterling Secure Proxy
  • Medium 5.4
    CVE-2021-29744

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to e…

    IBM Maximo Asset Management
  • Medium 6.2
    CVE-2021-29862

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to …

    IBM AIX VIOS
  • High 8.4
    CVE-2021-29801

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain…

    IBM AIX VIOS
  • Medium 5.6
    CVE-2021-29772

    IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. I…

    IBM API Connect
  • Medium 6.2
    CVE-2021-29727

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial …

    IBM AIX VIOS
  • Medium 6.5
    CVE-2021-29715

    IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial o…

    IBM API Connect
  • Medium 5.6
    CVE-2021-29802

    IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which crea…

    IBM Security
  • Medium 5.9
    CVE-2021-29704

    IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sen…

    IBM Security
  • Medium 4.3
    CVE-2020-4992

    IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an a…

    IBM DataPower Gateway
  • Medium 5.4
    CVE-2020-4706

    IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to HTTP header injection, caused by improper validation of input…

    IBM API Connect
  • Medium 5.3
    CVE-2021-29880

    IBM QRadar SIEM 7.4.3 GA - 7.4.3 Fix Pack 1 when using domains or multi-tenancy could be vulnerable to information disc…

    IBM QRadar SIEM
  • High 7.0
    CVE-2021-20509

    IBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute…

    IBM Maximo Asset Management
  • Medium 5.3
    CVE-2021-20427

    IBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force…

    IBM Security Guardium
  • Medium 4.3
    CVE-2021-20420

    IBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in f…

    IBM Security Guardium
  • Medium 4.7
    CVE-2021-20418

    IBM Security Guardium 11.2 does not require that users should have strong passwords by default, which makes it easier f…

    IBM Security Guardium
  • Low 2.7
    CVE-2021-29739

    IBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is re…

    IBM Planning Analytics Local
  • Medium 6.5
    CVE-2021-29714

    IBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation…

    IBM Content Navigator
  • Medium 5.9
    CVE-2021-20349

    IBM Tivoli Workload Scheduler 9.4 and 9.5 is vulnerable to a stack-based buffer overflow, caused by improper bounds che…

    IBM Workload Scheduler
  • Medium 5.9
    CVE-2021-29765

    IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service acc…

    IBM PowerVM Hypervisor
  • Medium 5.4
    CVE-2020-4707

    IBM API Connect 5.0.0.0 through 5.0.8.11 is vulnerable to cross-site scripting. This vulnerability allows users to embe…

    IBM API Connect
  • Medium 4.9
    CVE-2021-29697

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authent…

    IBM Cloud Pak for Security
  • High 8.0
    CVE-2021-29696

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authent…

    IBM Cloud Pak for Security
  • Low 3.7
    CVE-2021-20541

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive inf…

    IBM Cloud Pak for Security
  • Low 2.7
    CVE-2021-20540

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive inf…

    IBM Cloud Pak for Security
  • Medium 5.3
    CVE-2021-20539

    IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive inf…

    IBM Cloud Pak for Security
  • Medium 4.3
    CVE-2021-29757

    IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to e…

    IBM QRadar User Behavior Analytics
  • High 8.4
    CVE-2021-29741

    IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root pri…

    IBM AIX VIOS
  • Critical 9.8
    CVE-2021-29781

    IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an …

    IBM Partner Engagement Manager