Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-25689 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Mar 21, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot...Show more IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 247618.Show less
CVE-2023-25687 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Mar 21, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to obtain sensitive information from log files. IBM X-Force ID: 247602.
CVE-2023-27875 1Ibm 1Aspera Faspex Jun 17, 2026 Mar 16, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Aspera Faspex 5.0.4 could allow a user to change other user's credentials due to improper access controls. IBM X-Force ID: 249847.
CVE-2023-22591 1Ibm 2Robotic Process Automation Robotic Process Automation As A Service Jun 17, 2026 Mar 15, 2023 N/A· v4 3.2 LOW· v3 N/A· v2 IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID...Show more IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for not being invalidated after a password reset. IBM X-Force ID: 243710.Show less
CVE-2023-25680 1Ibm 3Robotic Process Automation Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak Jun 17, 2026 Mar 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.1 through 21.0.5 is vulnerable to insufficiently protecting credentials. Queue Provider credentials are not obfuscated while editing queue provider details. IBM X-Force ID: 247032.
CVE-2022-46773 1Ibm 3Robotic Process Automation Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak Jun 17, 2026 Mar 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951.
CVE-2023-22876 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Mar 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-...Show more IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 244364.Show less
CVE-2022-46774 1Ibm 1Manage Application Jun 17, 2026 Mar 15, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID:...Show more IBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.Show less
CVE-2020-4927 1Ibm 1Spectrum Scale Jun 17, 2026 Mar 15, 2023 N/A· v4 8.2 HIGH· v3 N/A· v2 A vulnerability in the Spectrum Scale 5.0.5.0 through 5.1.6.1 core component could allow unauthorized access to user data or injection of arbitrary data in the communication protocol. IBM X-Force ID: 191695.
CVE-2020-4556 1Ibm 1Financial Transaction Manager Jun 17, 2026 Mar 15, 2023 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Financial Transaction Manager for High Value Payments for Multi-Platform 3.2.0 through 3.2.10 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 183329.
CVE-2023-26284 1Ibm 1Mq Certified Container Jun 17, 2026 Mar 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM...Show more IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration access to the MQ console due to improper access controls. IBM X-Force ID: 248417.Show less
CVE-2022-43874 1Ibm 1App Connect Enterprise Certified Container Jun 17, 2026 Mar 15, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...Show more IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 239963.Show less
CVE-2023-24975 1Ibm 1Spectrum Symphony Jun 17, 2026 Mar 10, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, includ...Show more IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030. Show less
CVE-2022-43902 1Ibm 1Mq Appliance Jun 17, 2026 Mar 10, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF or MQSC messages. IBM X-Force ID: 240832.
CVE-2020-5002 1Ibm 1Financial Transaction Manager Jun 17, 2026 Mar 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions due to improper validation. IBM X-Force ID: 192954.
CVE-2023-27290 1Ibm 1Observability With Instana Jun 17, 2026 Mar 3, 2023 N/A· v4 9.1 CRITICAL· v3 N/A· v2 Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could acce...Show more Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737.Show less
CVE-2022-35645 1Ibm 2Maximo Application Suite Maximo Asset Management Jun 17, 2026 Mar 2, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W...Show more IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 230958.Show less
CVE-2020-5026 1Ibm 1Financial Transaction Manager Jun 17, 2026 Mar 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the brows...Show more IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 193662.Show less
CVE-2020-5001 1Ibm 1Financial Transaction Manager Jun 17, 2026 Mar 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to...Show more IBM Financial Transaction Manager 3.2.0 through 3.2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 192953. Show less
CVE-2023-26281 1Ibm 1Http Server Jun 17, 2026 Mar 1, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296.

Previous 1...888990...413 Next