Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-25053 1Ibm 1Cognos Analytics Jun 17, 2026 Jun 28, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an a...Show more IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. This could allow an attacker to spoof a trusted entity by interfering in the communication path between IBM Planning Analytics server and IBM Cognos Analytics server. IBM X-Force ID: 283364.Show less
CVE-2024-25041 1Ibm 1Cognos Analytics Jun 17, 2026 Jun 28, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). A remote attacker could execute malicious commands due to improper validati...Show more IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). A remote attacker could execute malicious commands due to improper validation of column headings in Cognos Assistant. IBM X-Force ID: 282780.Show less
CVE-2024-25031 1Ibm 1Storage Defender Jun 17, 2026 Jun 28, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials. IBM X-Force ID: 281678.
CVE-2022-38383 1Ibm 2Cloud Pak For Security Qradar Suite Jun 17, 2026 Jun 28, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force I...Show more IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.Show less
CVE-2024-35155 1Ibm 1Mq Jun 17, 2026 Jun 28, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in furthe...Show more IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 292765.Show less
CVE-2024-31919 1Ibm 1Mq Jun 17, 2026 Jun 28, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used. IBM X-Force ID:...Show more IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS and 9.3 CD, in certain configurations, is vulnerable to a denial of service attack caused by an error processing messages when an API Exit using MQBUFMH is used. IBM X-Force ID: 290259.Show less
CVE-2024-31912 1Ibm 1Mq Jun 17, 2026 Jun 28, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM MQ 9.3 LTS and 9.3 CD could allow an authenticated user to escalate their privileges under certain configurations due to incorrect privilege assignment. IBM X-Force ID: 289894.
CVE-2024-35139 1Ibm 1Security Access Manager Jun 17, 2026 Jun 28, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. IBM X-Force ID: 292415.
CVE-2024-35137 1Ibm 1Security Access Manager Jun 17, 2026 Jun 28, 2024 N/A· v4 6.2 MEDIUM· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413.
CVE-2023-38370 1Ibm 1Security Access Manager Jun 17, 2026 Jun 27, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages. IBM X-Force ID: 261197.
CVE-2023-38368 1Ibm 1Security Access Manager Jun 17, 2026 Jun 27, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls. IBM X-Force ID: 261195.
CVE-2023-30998 1Ibm 1Security Access Manager Jun 17, 2026 Jun 27, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649.
CVE-2023-30997 1Ibm 1Security Access Manager Jun 17, 2026 Jun 27, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638.
CVE-2024-35153 1Ibm 1Websphere Application Server Jun 17, 2026 Jun 27, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality po...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 292640.Show less
CVE-2024-31916 1Ibm 1Openbmc Jun 17, 2026 Jun 27, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM OpenBMC FW1050.00 through FW1050.10 BMCWeb HTTPS server component could disclose sensitive URI content to an unauthorized actor that bypasses authentication channels. IBM X-ForceID: 290026.
CVE-2023-42014 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Jun 27, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering t...Show more IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.2.0.2 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265511.Show less
CVE-2023-42011 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Jun 27, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which in...Show more IBM Sterling B2B Integrator Standard Edition 6.1 and 6.2 does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with. IBM X-Force ID: 265508.Show less
CVE-2023-38371 1Ibm 1Security Access Manager Jun 17, 2026 Jun 27, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 261198.
CVE-2024-31883 1Ibm 1Security Verify Access Jun 17, 2026 Jun 27, 2024 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption. IBM X-Force ID: 287615.
CVE-2023-30430 1Ibm 1Security Verify Access Jun 17, 2026 Jun 27, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs. IBM X-Force ID: 252183.

Previous 1...565758...413 Next