Vendor
IBM
6,576 known vulnerabilities.
Products
API Connect 287
AIX 217
i 214
WebSphere Application Server 188
DB2 for Linux, UNIX and Windows 182
Langflow OSS 177
InfoSphere Information Server 152
PowerVM VIOS 146
Sterling B2B Integrator 138
Rational Collaborative Lifecycle Management 131
Rational Quality Manager 126
MQ 117
QRadar SIEM 113
Security Guardium 106
Cognos Analytics 105
Guardium Data Protection 97
Rational DOORS Next Generation 96
Security Verify Access 93
Maximo Asset Management 86
WebSphere Application Server - Liberty 86
Rational Engineering Lifecycle Manager 76
Rational Team Concert 72
Sterling File Gateway 71
DataStage on Cloud Pak for Data 66
Security Verify Access Container 65
Concert 64
Verify Identity Access 59
Verify Identity Access Container 59
Security Key Lifecycle Manager 57
Db2 56
Cloud Pak for Security 55
Cognos Controller 52
Engineering Lifecycle Optimization 52
UrbanCode Deploy 52
Spectrum Protect Plus 49
Spectrum Scale 48
Engineering Workflow Management 48
Rational Rhapsody Design Manager 47
Financial Transaction Manager (FTM) for RedHat OpenShift 46
Robotic Process Automation 45
6,576 results · Feed
-
Medium 6.4
IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to …
-
Medium 5.4
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed …
-
High 7.1
IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when process…
-
Medium 6.5
IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause…
-
Medium 6.5
IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensit…
-
Medium 5.9
IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the …
-
Medium 5.9
Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a ce…
-
Medium 5.3
IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a de…
-
High 8.4
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout …
-
Medium 6.5
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering…
-
High 8.4
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kerne…
-
Medium 5.4
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Medium 6.5
IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some …
-
Low 3.7
IBM Control Desk 7.6.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the …
-
Medium 4.3
IBM Control Desk 7.6.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be a…
-
Medium 5.4
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 2…
-
Medium 4.0
IBM Planning Analytics Local 2.0 allows web pages to be stored locally which can be read by another user on the system.…
-
High 7.1
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to an XML External Entity Injection (XXE) attack when pro…
-
Medium 6.5
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sendi…
-
Medium 6.2
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocompl…
-
Medium 4.4
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 stores user credentials in plain clear text which can be read by a loca…
-
Medium 4.3
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…
-
Medium 4.3
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…
-
Medium 4.3
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to cross-site request forgery which could allow an attack…
-
Medium 6.8
IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open re…
-
Medium 5.4
IBM Engineering Test Management 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows …
-
Medium 5.4
IBM Maximo Asset Management 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…
-
High 8.8
IBM DataPower Gateway V10CD, 10.0.1, and 2018.4.1 is vulnerable to cross-site request forgery which could allow an atta…
-
Medium 4.5
IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may caus…
-
High 8.2
IBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack w…
-
Low 2.3
IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege l…
-
Medium 4.3
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.…
-
Medium 4.3
IBM Sterling File Gateway 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 could allow a r…
-
Medium 6.3
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.…
-
Medium 5.4
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.…
-
Medium 5.3
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed te…
-
Medium 4.6
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 does not require that users should have strong passwords by d…
-
Medium 4.4
IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 could allow a privileged user to obtain sensitive Azure bot c…
-
Medium 6.3
IBM Spectrum Scale Data Access Services (DAS) 5.1.3.1 could allow an authenticated user to insert code which could allo…
-
Medium 6.2
IBM Workload Scheduler 9.4 and 9.5 could allow a local user to overwrite key system files which would cause the system …