Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-50303 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 28, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 273333.Show less
CVE-2023-43051 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Feb 26, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 267451.Show less
CVE-2023-38359 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Feb 26, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 260744.Show less
CVE-2023-32344 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Feb 26, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 is vulnerable to form action hijacking where it is possible to modify the form action to reference an arbitrary path. IBM X-Force ID: 255898.
CVE-2023-30996 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Feb 26, 2024 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
CVE-2022-34357 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Feb 26, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exha...Show more IBM Cognos Analytics Mobile Server 11.1.7, 11.2.4, and 12.0.0 is vulnerable to Denial of Service due to due to weak or absence of rate limiting. By making unlimited http requests, it is possible for a single user to exhaust server resources over a period of time making service unavailable for other legitimate users. IBM X-Force ID: 230510.Show less
CVE-2022-43842 1Ibm 1Aspera Console Jun 17, 2026 Feb 23, 2024 N/A· v4 9.1 CRITICAL· v3 N/A· v2 IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-...Show more IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 239079.Show less
CVE-2024-25021 1Ibm 2Aix Vios Jun 17, 2026 Feb 22, 2024 N/A· v4 8.4 HIGH· v3 N/A· v2 IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320.
CVE-2023-50955 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 21, 2024 N/A· v4 2.7 LOW· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 2757...Show more IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.Show less
CVE-2023-33843 1Ibm 1Infosphere Information Server Jun 17, 2026 Feb 21, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 256544.Show less
CVE-2023-50306 1Ibm 1Common Licensing Jun 17, 2026 Feb 20, 2024 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337.
CVE-2022-42443 1Ibm 2Trusteer Android Sdk For Mobile Trusteer Ios Sdk For Mobile Jun 17, 2026 Feb 17, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An undisclosed issue in Trusteer iOS SDK for mobile versions prior to 5.7 and Trusteer Android SDK for mobile versions prior to 5.7 may allow uploading of files. IBM X-Force ID: 238535.
CVE-2022-41738 1Ibm 1Spectrum Scale Container Native Storage Access Jun 17, 2026 Feb 17, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Storage Scale Container Native Storage Access 5.1.2.1 -through 5.1.7.0 could allow an attacker to initiate connections to containers from external networks. IBM X-Force ID: 237812.
CVE-2022-41737 1Ibm 1Spectrum Scale Container Native Storage Access Jun 17, 2026 Feb 17, 2024 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Storage Scale Container Native Storage Access 5.1.2.1 through 5.1.7.0 could allow a local attacker to initiate connections from a container outside the current namespace. IBM X-Force ID: 237811.
CVE-2024-22337 1Ibm 2Cloud Pak For Security Qradar Suite Jun 17, 2026 Feb 17, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279977.
CVE-2024-22336 1Ibm 2Cloud Pak For Security Qradar Suite Jun 17, 2026 Feb 17, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279976.
CVE-2024-22335 1Ibm 2Cloud Pak For Security Qradar Suite Jun 17, 2026 Feb 17, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 279975.
CVE-2023-50951 1Ibm 2Cloud Pak For Security Qradar Suite Jun 17, 2026 Feb 17, 2024 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive information about invalid authorization attempts. IBM X-Force ID: 275...Show more IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive information about invalid authorization attempts. IBM X-Force ID: 275747.Show less
CVE-2023-46186 1Ibm 1Jazz For Service Management Jun 17, 2026 Feb 14, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929.
CVE-2022-22506 1Ibm 1Robotic Process Automation Jun 17, 2026 Feb 12, 2024 N/A· v4 4.6 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.2 contains a vulnerability that could allow user ids may be exposed across tenants. IBM X-Force ID: 227293.

Previous 1...666768...413 Next