Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-32338 1Ibm 2Sterling External Authentication Server Sterling Secure Proxy Jun 17, 2026 Sep 5, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a local user with container access. IBM X-Force ID: 255585.
CVE-2022-43903 1Ibm 1Security Guardium Jun 17, 2026 Sep 5, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Security Guardium 10.6, 11.3, and 11.4 could allow an authenticated user to cause a denial of service due to due to improper input validation. IBM X-Force ID: 240894.
CVE-2023-33835 1Ibm 1Security Verify Information Queue Jun 17, 2026 Aug 31, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 256015.
CVE-2023-33834 1Ibm 1Security Verify Information Queue Jun 17, 2026 Aug 31, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-force ID: 256014.
CVE-2023-33833 1Ibm 1Security Verify Information Queue Jun 17, 2026 Aug 31, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID: 256013.
CVE-2023-26272 1Ibm 1Guardium Cloud Key Manager Jun 17, 2026 Aug 28, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. Thi...Show more IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 248133.Show less
CVE-2023-26271 1Ibm 1Guardium Cloud Key Manager Jun 17, 2026 Aug 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 24...Show more IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 248126.Show less
CVE-2023-26270 1Ibm 1Guardium Cloud Key Manager Jun 17, 2026 Aug 28, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specia...Show more IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the system, caused by an angular template injection flaw. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 248119.Show less
CVE-2023-24959 1Ibm 1Infosphere Information Server Jun 17, 2026 Aug 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.
CVE-2023-23473 1Ibm 1Infosphere Information Server Jun 17, 2026 Aug 28, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 245400.Show less
CVE-2023-22877 1Ibm 1Infosphere Information Server Jun 17, 2026 Aug 28, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 2...Show more IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 244368.Show less
CVE-2022-43904 1Ibm 1Security Guardium Jun 17, 2026 Aug 28, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Guardium 11.3 and 11.4 could disclose sensitive information to an attacker due to improper restriction of excessive authentication attempts. IBM X-Force ID: 240895.
CVE-2023-38730 1Ibm 1Storage Copy Data Management Jun 17, 2026 Aug 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.
CVE-2023-33852 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...Show more IBM Security Guardium 11.4 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 257614.Show less
CVE-2023-30437 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.3, 11.4, and 11.5 could allow an unauthorized user to enumerate usernames by sending a specially crafted HTTP request. IBM X-Force ID: 252293.
CVE-2023-30436 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252292.Show less
CVE-2023-30435 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potential...Show more IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 252291.Show less
CVE-2022-43909 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...Show more IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 240905.Show less
CVE-2022-43907 1Ibm 1Security Guardium Jun 17, 2026 Aug 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Security Guardium 11.4 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 240901.
CVE-2023-40371 1Ibm 2Aix Vios Jun 17, 2026 Aug 24, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM AIX 7.2, 7.3, VIOS 3.1's OpenSSH implementation could allow a non-privileged local user to access files outside of those allowed due to improper access controls. IBM X-Force ID: 263476.

Previous 1...798081...413 Next