Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-31889 1Ibm 1Planning Analytics Local Jun 17, 2026 May 31, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...Show more IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 288136.Show less
CVE-2024-22338 1Ibm 1Security Verify Access Oidc Provider Jun 17, 2026 May 31, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978.
CVE-2022-43841 1Ibm 1Aspera Console Jun 17, 2026 May 30, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Aspera Console 3.4.0 through 3.4.2 PL9 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 239078.
CVE-2022-43575 1Ibm 1Aspera Console Jun 17, 2026 May 30, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 238645.Show less
CVE-2022-43384 1Ibm 1Aspera Console Jun 17, 2026 May 30, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM Aspera Console 3.4.0 through 3.4.2 PL5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 238645.Show less
CVE-2023-42005 1Ibm 2Db2 Db2 Warehouse Jun 17, 2026 May 29, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. I...Show more IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264.Show less
CVE-2024-28793 1Ibm 1Engineering Workflow Management Jun 17, 2026 May 28, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri...Show more IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 286830.Show less
CVE-2023-37411 1Ibm 1Aspera Faspex Jun 17, 2026 May 28, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...Show more IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260139.Show less
CVE-2023-47710 1Ibm 1Security Guardium Jun 17, 2026 May 24, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM Security Guardium 11.4, 11.5, and 12.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 271525.Show less
CVE-2024-31895 1Ibm 1App Connect Enterprise Jun 17, 2026 May 22, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288176.
CVE-2024-31894 1Ibm 1App Connect Enterprise Jun 17, 2026 May 22, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive user information using an expired access token. IBM X-Force ID: 288175.
CVE-2024-27264 1Ibm 1I Jun 17, 2026 May 22, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator pr...Show more IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 284563.Show less
CVE-2024-31904 1Ibm 1App Connect Enterprise Jun 17, 2026 May 22, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception. IBM X-Force ID: 289647...Show more IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 integration nodes could allow an authenticated user to cause a denial of service due to an uncaught exception. IBM X-Force ID: 289647.Show less
CVE-2024-31893 1Ibm 1App Connect Enterprise Jun 17, 2026 May 22, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.12.1 could allow an authenticated user to obtain sensitive calendar information using an expired access token. IBM X-Force ID: 288174.
CVE-2024-31879 1Ibm 1I Jun 17, 2026 May 18, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM i 7.2, 7.3, and 7.4 could allow a remote attacker to execute arbitrary code leading to a denial of service of network ports on the system, caused by the deserialization of untrusted data. IBM X-Force ID: 287539.
CVE-2023-47717 1Ibm 1Security Guardium Jun 17, 2026 May 16, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.
CVE-2024-27260 1Ibm 2Aix Vios Jun 17, 2026 May 16, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985.
CVE-2024-28781 1Ibm 2Devops Deploy Urbancode Deploy Jun 17, 2026 May 14, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb...Show more IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.20, 7.1 through 7.1.2.16, 7.2 through 7.2.3.9, 7.3 through 7.3.2.4, and 8.0 through 8.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285654.Show less
CVE-2024-28761 1Ibm 1App Connect Enterprise Jun 17, 2026 May 14, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim...Show more IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 285245.Show less
CVE-2024-28760 1Ibm 1App Connect Enterprise Jun 17, 2026 May 14, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.25 and 12.0.1.0 through 12.0.12.0 dashboard is vulnerable to a denial of service due to improper restrictions of resource allocation. IBM X-Force ID: 285244.

Previous 1...585960...413 Next