Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28527 1Ibm 2Informix Dynamic Server Informix Dynamic Server On Cloud Pak For Data Jun 17, 2026 Dec 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Informix Dynamic Server 12.10 and 14.10 cdr is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251206.
CVE-2023-28526 1Ibm 2Informix Dynamic Server Informix Dynamic Server On Cloud Pak For Data Jun 17, 2026 Dec 9, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Informix Dynamic Server 12.10 and 14.10 archecker is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow a local user to cause a segmentation fault. IBM X-Force ID: 251204.
CVE-2023-28523 1Ibm 2Informix Dynamic Server Informix Dynamic Server On Cloud Pak For Data Jun 17, 2026 Dec 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Informix Dynamic Server 12.10 and 14.10 onsmsync is vulnerable to a heap buffer overflow, caused by improper bounds checking which could allow an attacker to execute arbitrary code. IBM X-Force ID: 250753.
CVE-2023-40687 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.
CVE-2023-38727 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.
CVE-2023-29258 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.
CVE-2023-47701 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 266166.
CVE-2023-46167 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is used. IBM X-Force ID: 269367.
CVE-2023-38003 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow a user with DATAACCESS privileges to execute routines that they should not have access to. IBM X-Force ID: 260214.
CVE-2023-40692 1Ibm 1Db2 Jun 17, 2026 Dec 4, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: 264807.
CVE-2023-45178 1Ibm 1Db2 Jun 17, 2026 Dec 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: 268073.
CVE-2023-46174 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 269506. Show less
CVE-2023-43021 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...Show more IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 266167. Show less
CVE-2023-42022 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265938. Show less
CVE-2023-42019 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
CVE-2023-42009 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504.Show less
CVE-2023-40699 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161.
CVE-2023-43015 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.Show less
CVE-2023-38268 1Ibm 1Infosphere Information Server Jun 17, 2026 Dec 1, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585.Show less
CVE-2023-26024 1Ibm 1Planning Analytics On Cloud Pak For Data Jun 17, 2026 Dec 1, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898.

Previous 1...737475...413 Next