Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-45088 1Ibm 1Maximo Asset Management Jun 17, 2026 Nov 11, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po...Show more IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-35146 1Ibm 1Maximo Application Suite Jun 17, 2026 Nov 6, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI th...Show more IBM Maximo Application Suite - Monitor Component 8.10.11, 8.11.8, and 9.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-45086 1Ibm 1Websphere Application Server Jun 17, 2026 Nov 4, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.Show less
CVE-2024-41745 1Ibm 1Cics Tx Jun 17, 2026 Nov 1, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM CICS TX Standard is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-41744 1Ibm 1Cics Tx Jun 17, 2026 Nov 1, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM CICS TX Standard 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2024-41741 1Ibm 1Txseries For Multiplatforms Jun 17, 2026 Nov 1, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM TXSeries for Multiplatforms 10.1 could allow an attacker to determine valid usernames due to an observable timing discrepancy which could be used in further attacks against the system.
CVE-2024-41738 1Ibm 1Txseries For Multiplatforms Jun 17, 2026 Nov 1, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM TXSeries for Multiplatforms 10.1 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.
CVE-2024-45656 1Ibm 28Ess 5000 (5105 22e) Firmware Power System E1080 (9080 Hex) FirmwarePower System E850 (8408 E8e) Firmware+25 more Jun 17, 2026 Oct 29, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow...Show more IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, and FW1060.00 through FW1060.10 has static credentials which may allow network users to gain service privileges to the FSP.Show less
CVE-2024-38314 1Ibm 1Maximo Application Suite Jun 17, 2026 Oct 24, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic key to an attacker that has compromised environment.
CVE-2023-50310 1Ibm 1Cics Transaction Gateway Jun 17, 2026 Oct 23, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
CVE-2024-31880 1Ibm 1Db2 Jun 17, 2026 Oct 23, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL state...Show more IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.Show less
CVE-2024-43177 1Ibm 1Concert Jun 17, 2026 Oct 22, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.
CVE-2024-43173 1Ibm 1Concert Jun 17, 2026 Oct 22, 2024 N/A· v4 3.7 LOW· v3 N/A· v2 IBM Concert 1.0.0 and 1.0.1 vulnerable to attacks that rely on the use of cookies without the SameSite attribute.
CVE-2024-45072 1Ibm 1Websphere Application Server Jun 17, 2026 Oct 16, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.Show less
CVE-2024-45071 1Ibm 1Websphere Application Server Jun 17, 2026 Oct 16, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-49340 1Ibm 1Watson Studio Local Jun 17, 2026 Oct 16, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Watson Studio Local 1.2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2024-45085 1Ibm 1Websphere Application Server Jun 17, 2026 Oct 15, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an e...Show more IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service.Show less
CVE-2024-45073 1Ibm 1Websphere Application Server Jun 17, 2026 Sep 30, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functiona...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2024-43191 1Ibm 1Cloud Pak For Multicloud Management Monitoring Jun 17, 2026 Sep 26, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM ManageIQ could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted yaml file request.
CVE-2024-31899 1Ibm 1Cognos Command Center Jun 17, 2026 Sep 26, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Cognos Command Center 10.2.4.1 and 10.2.5 could disclose highly sensitive user information to an authenticated user with physical access to the device.

Previous 1...505152...413 Next