Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-35013 1Ibm 1Security Verify Governance Jun 17, 2026 Oct 16, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.
CVE-2023-40378 1Ibm 1I Jun 17, 2026 Oct 15, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host ope...Show more IBM Directory Server for IBM i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain component access to the host operating system. IBM X-Force ID: 263584.Show less
CVE-2023-40367 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Oct 14, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials di...Show more IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 263376.Show less
CVE-2023-30994 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Oct 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138
CVE-2023-45176 1Ibm 2App Connect Enterprise Integration Bus Jun 17, 2026 Oct 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows. IBM X-Force ID: 24...Show more IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through 10.1.0.1 are vulnerable to a denial of service for integration nodes on Windows. IBM X-Force ID: 247998.Show less
CVE-2023-35024 1Ibm 1Cloud Pak For Business Automation Jun 17, 2026 Oct 14, 2023 N/A· v4 7.6 HIGH· v3 N/A· v2 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows us...Show more IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 258349.Show less
CVE-2022-43868 1Ibm 1Security Verify Access Oidc Provider Jun 17, 2026 Oct 14, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445.
CVE-2022-43740 1Ibm 1Security Verify Access Oidc Provider Jun 17, 2026 Oct 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 238921.
CVE-2022-33165 1Ibm 1Security Directory Integrator Jun 17, 2026 Oct 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary file...Show more IBM Security Directory Server 6.4.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 228582.Show less
CVE-2022-33161 1Ibm 4Security Directory Integrator Security Directory ServerSecurity Directory Suite+1 more Jun 17, 2026 Oct 14, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to...Show more IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 228569.Show less
CVE-2022-32755 1Ibm 3Security Directory Server Security Directory SuiteSecurity Verify Directory Jun 17, 2026 Oct 14, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume m...Show more IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.Show less
CVE-2023-40682 1Ibm 1App Connect Enterprise Jun 17, 2026 Oct 13, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise 12.0.1.0 through 12.0.8.0 contains an unspecified vulnerability that could allow a local privileged user to obtain sensitive information from API logs. IBM X-Force ID: 263833.
CVE-2022-33160 1Ibm 1Security Directory Suite Va Jun 17, 2026 Oct 6, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.
CVE-2022-34355 1Ibm 2Collaborative Lifecycle Management Engineering Lifecycle Management Jun 17, 2026 Oct 6, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version information to a user that could be used in further attacks against the system. IBM X-For...Show more IBM Jazz Foundation (IBM Engineering Lifecycle Management 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2) could disclose sensitive version information to a user that could be used in further attacks against the system. IBM X-Force ID: 230498.Show less
CVE-2023-43058 1Ibm 2Robotic Process Automation Robotic Process Automation For Cloud Pak Jun 17, 2026 Oct 6, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Robotic Process Automation 23.0.9 is vulnerable to privilege escalation that affects ownership of projects. IBM X-Force ID: 247527.
CVE-2023-35897 1Ibm 2Storage Protect Storage Protect Client Jun 17, 2026 Oct 6, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary code on the system using a specially crafted file, caused by a DLL hijac...Show more IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary code on the system using a specially crafted file, caused by a DLL hijacking flaw. IBM X-Force ID: 259246.Show less
CVE-2023-40684 1Ibm 1Content Navigator Jun 17, 2026 Oct 4, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the in...Show more IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 264019.Show less
CVE-2023-40376 1Ibm 1Urbancode Deploy Jun 17, 2026 Oct 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authenticati...Show more IBM UrbanCode Deploy (UCD) 7.1 - 7.1.2.12, 7.2 through 7.2.3.5, and 7.3 through 7.3.2.0 under certain configurations could allow an authenticated user to make changes to environment variables due to improper authentication controls. IBM X-Force ID: 263581.Show less
CVE-2022-43906 1Ibm 1Security Guardium Jun 17, 2026 Oct 4, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.5 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 240897.
CVE-2023-37404 1Ibm 1Observability With Instana Jun 17, 2026 Oct 4, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Observability with Instana 1.0.243 through 1.0.254 could allow an attacker on the network to execute arbitrary code on the host after a successful DNS poisoning attack. IBM X-Force ID: 259789.

Previous 1...777879...413 Next