Vendor

IBM

6,576 known vulnerabilities.

Products

API Connect 287 AIX 217 i 214 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 66 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45

All Critical High Medium Low Exploited only Public exploit

6,576 results · Feed

Medium 5.9

CVE-2021-39053

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, cau…

IBM Spectrum Copy Data Management

Dec 13, 2021
Medium 5.6

CVE-2021-39052

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console wi…

IBM Spectrum Copy Data Management

Dec 13, 2021
Medium 5.9

CVE-2021-38947

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allo…

IBM Spectrum Copy Data Management

Dec 13, 2021
Medium 6.3

CVE-2021-38937

IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a …

IBM PowerVM Hypervisor

Dec 10, 2021
High 7.4

CVE-2021-38917

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read an…

IBM PowerVM Hypervisor

Dec 10, 2021
Medium 5.9

CVE-2021-39002

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expe…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
High 7.5

CVE-2021-38951

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a speci…

IBM WebSphere Application Server

Dec 9, 2021
Medium 6.5

CVE-2021-38931

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclo…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.5

CVE-2021-38926

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
High 8.7

CVE-2021-29678

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user wi…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.9

CVE-2021-20373

IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as u…

IBM DB2 for Linux, UNIX and Windows Linux Windows

Dec 9, 2021
Medium 5.4

CVE-2021-38909

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

IBM Cognos Analytics

Dec 3, 2021
Medium 5.4

CVE-2021-29867

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should…

IBM Cognos Analytics

Dec 3, 2021
Medium 4.3

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which co…

IBM Cognos Analytics

Dec 3, 2021
Medium 5.3

CVE-2021-29719

IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifyi…

IBM Cognos Analytics

Dec 3, 2021
Low 2.7

CVE-2021-29716

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user sho…

IBM Cognos Analytics

Dec 3, 2021
Medium 6.1

CVE-2021-20493

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

IBM Cognos Analytics

Dec 3, 2021
Medium 5.9

CVE-2021-20470

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes…

IBM Cognos Analytics

Dec 3, 2021
Medium 5.4

CVE-2021-29863

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attack…

IBM QRadar SIEM

Dec 1, 2021
Medium 5.4

CVE-2021-29849

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

IBM QRadar SIEM

Dec 1, 2021
Medium 5.9

CVE-2021-29779

IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key ex…

IBM QRadar SIEM

Dec 1, 2021
Medium 5.9

CVE-2021-20400

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt …

IBM QRadar SIEM

Dec 1, 2021
Medium 5.9

CVE-2021-39000

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensit…

IBM MQ Appliance

Nov 30, 2021
Medium 5.1

CVE-2021-38999

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within tra…

IBM MQ Appliance

Nov 30, 2021
High 8.2

CVE-2021-38967

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-For…

IBM MQ Appliance

Nov 30, 2021
Medium 5.1

CVE-2021-38958

IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Forc…

IBM MQ Appliance

Nov 30, 2021
Medium 6.8

CVE-2021-38873

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary comman…

IBM Planning Analytics

Nov 24, 2021
Low 2.7

CVE-2021-38980

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a r…

IBM Security Key Lifecycle Manager

Nov 23, 2021
Medium 5.9

CVE-2021-38891

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allo…

IBM Connect:Direct Web Services

Nov 23, 2021
Medium 5.9

CVE-2021-38890

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remo…

IBM Connect:Direct Web Services

Nov 23, 2021
Medium 6.5

CVE-2021-38875

IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an erro…

IBM MQ

Nov 23, 2021
Medium 6.2

CVE-2021-38959

IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of …

IBM SPSS Statistics

Nov 17, 2021
Medium 6.2

CVE-2021-29861

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sens…

IBM AIX VIOS

Nov 17, 2021
Medium 6.2

CVE-2021-29860

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library…

IBM AIX VIOS

Nov 17, 2021
Medium 6.2

CVE-2021-38949

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local …

IBM MQ

Nov 16, 2021
Medium 4.4

CVE-2021-38882

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records bef…

IBM Spectrum Scale

Nov 16, 2021
Low 3.7

CVE-2021-38984

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could…

IBM Security Key Lifecycle Manager

Nov 15, 2021
Medium 4.4

CVE-2021-38983

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could…

IBM Security Key Lifecycle Manager

Nov 15, 2021
Medium 5.4

CVE-2021-38982

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability all…

IBM Security Key Lifecycle Manager

Nov 15, 2021
Medium 5.3

CVE-2021-38981

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information…

IBM Security Key Lifecycle Manager

Nov 15, 2021

IBM

Products

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, cau…

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console wi…

IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allo…

IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a …

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read an…

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expe…

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a speci…

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclo…

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local u…

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user wi…

IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as u…

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should…

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which co…

IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifyi…

IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user sho…

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed …

IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes…

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attack…

IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

IBM QRadar SIEM 7.3 and 7.4 could allow an attacker to obtain sensitive information due to the server performing key ex…

IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt …

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local attacker to obtain sensitive information by inclusion of sensit…

IBM MQ Appliance could allow a local attacker to obtain sensitive information by inclusion of sensitive data within tra…

IBM MQ Appliance 9.2 CD and 9.2 LTS could allow a local privileged user to inject and execute malicious code. IBM X-For…

IBM MQ Appliance 9.2 CD and 9.2 LTS is affected by a denial of service attack caused by a concurrency issue. IBM X-Forc…

IBM Planning Analytics 2.0 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary comman…

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a r…

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses weaker than expected cryptographic algorithms that could allo…

IBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remo…

IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an erro…

IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of …

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sens…

IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library…

IBM MQ 7.5, 8.0, 9.0 LTS, 9.1 CD, and 9.1 LTS stores user credentials in plain clear text which can be read by a local …

IBM Spectrum Scale 5.1.0 through 5.1.1.1 could allow a privileged admin to destroy filesystem audit logging records bef…

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could…

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could…

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability all…

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information…