Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-43867 1Ibm 1Spectrum Scale Container Native Storage Access Jun 17, 2026 Dec 6, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM Spectrum Scale 5.1.0.1 through 5.1.4.1 could allow a local attacker to execute arbitrary commands in the container. IBM X-Force ID: 239437.
CVE-2022-34361 1Ibm 1Sterling Secure Proxy Jun 17, 2026 Dec 6, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 230522.
CVE-2022-43901 1Ibm 1Websphere Automation For Ibm Cloud Pak For Watson Aiops Jun 17, 2026 Dec 1, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSpher...Show more IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829. Show less
CVE-2022-43900 1Ibm 1Websphere Automation For Ibm Cloud Pak For Watson Aiops Jun 17, 2026 Dec 1, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827.
CVE-2022-41297 1Ibm 3Db2 On Cloud Pak For Data Db2 Warehouse On Cloud Pak For DataDb2u Jun 17, 2026 Dec 1, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212...Show more IBM Db2U 3.5, 4.0, and 4.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 237212.Show less
CVE-2022-41732 1Ibm 1Maximo Application Suite Jun 17, 2026 Nov 28, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Maximo Mobile 8.7 and 8.8 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 237407.
CVE-2022-40228 1Ibm 1Datapower Gateway Jun 17, 2026 Nov 22, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authen...Show more IBM DataPower Gateway 10.0.3.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.9, 2018.4.1.0 through 2018.4.1.22, and 10.5.0.0 through 10.5.0.2 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 235527. Show less
CVE-2022-40746 1Ibm 1I Access Client Solutions Jun 17, 2026 Nov 21, 2022 N/A· v4 6.7 MEDIUM· v3 N/A· v2 IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a spe...Show more IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability. By placing a specially crafted file in a compromised folder, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236581.Show less
CVE-2022-40751 1Ibm 1Urbancode Deploy Jun 17, 2026 Nov 17, 2022 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissio...Show more IBM UrbanCode Deploy (UCD) 6.2.7.0 through 6.2.7.17, 7.0.0.0 through 7.0.5.12, 7.1.0.0 through 7.1.2.8, and 7.2.0.0 through 7.2.3.1 could allow a user with administrative privileges including "Manage Security" permissions may be able to recover a credential previously saved for performing authenticated LDAP searches. IBM X-Force ID: 236601.Show less
CVE-2022-38390 1Ibm 1Business Automation Workflow Jun 17, 2026 Nov 17, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potenti...Show more Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 233978.Show less
CVE-2022-40752 1Ibm 2Infosphere Information Server Infosphere Information Server On Cloud Jun 17, 2026 Nov 16, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements. IBM X-Force ID: 236687.
CVE-2022-34354 1Ibm 1Partner Engagement Manager Jun 17, 2026 Nov 16, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 IBM Sterling Partner Engagement Manager 2.0 allows encrypted storage of client data to be stored locally which can be read by another user on the system. IBM X-Force ID: 230424.
CVE-2022-40753 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 15, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236688. Show less
CVE-2022-38385 1Ibm 1Cloud Pak For Security Jun 17, 2026 Nov 15, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 2337...Show more IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or perform unauthorized actions due to improper input validation. IBM X-Force ID: 233777. Show less
CVE-2022-34320 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM CICS TX 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 229464.
CVE-2022-34317 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...Show more IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229459. Show less
CVE-2022-34316 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM CICS TX 11.1 does not neutralize or incorrectly neutralizes web scripting syntax in HTTP headers that can be used by web browser components that can process raw headers. IBM X-Force ID: 229452.
CVE-2022-34315 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclo...Show more IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229451. Show less
CVE-2022-34314 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 3.3 LOW· v3 N/A· v2 IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings. IBM X-Force ID: 229450.
CVE-2022-38705 1Ibm 1Cics Tx Jun 17, 2026 Nov 14, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing...Show more IBM CICS TX 11.1 Standard and Advanced could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a victim to a phishing site. IBM X-Force ID: 234172. Show less

Previous 1...949596...413 Next