Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34339 1Ibm 1Cognos Analytics Jun 17, 2026 Nov 3, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 "IBM Cognos Analytics 11.2.1, 11.2.0, 11.1.7 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 229963."
CVE-2022-30615 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 227592.Show less
CVE-2022-30608 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Forc...Show more "IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a "user that the website trusts. IBM X-Force ID: 227295.Show less
CVE-2022-22442 1Ibm 2Infosphere Information Server Infosphere Information Server On Cloud Jun 17, 2026 Nov 3, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 could allow an authenticated user to access information restricted to users with elevated privileges due to improper access controls. IBM X-Force ID: 224427."
CVE-2022-22425 1Ibm 1Infosphere Information Server Jun 17, 2026 Nov 3, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 22...Show more "IBM InfoSphere Information Server 11.7 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 223598."Show less
CVE-2021-39077 1Ibm 1Security Guardium Jun 17, 2026 Nov 3, 2022 N/A· v4 4.4 MEDIUM· v3 N/A· v2 IBM Security Guardium 10.5, 10.6, 11.0, 11.1, 11.2, 11.3, and 11.4 stores user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 215587.
CVE-2022-38388 1Ibm 1Navigator Mobile Jun 17, 2026 Oct 11, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control. IBM X-Force ID: 233968.
CVE-2022-34334 1Ibm 1Sterling Partner Engagement Manager Jun 17, 2026 Oct 10, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 229704.
CVE-2022-41291 1Ibm 1Infosphere Information Server Jun 17, 2026 Oct 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 236699.
CVE-2022-36772 1Ibm 1Infosphere Information Server Jun 17, 2026 Oct 7, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user.
CVE-2022-34308 1Ibm 1Cics Tx Jun 17, 2026 Oct 7, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling. IBM X-Force ID: 229437.
CVE-2022-30613 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Oct 7, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user. IBM X-Force ID: 227366.
CVE-2022-22493 1Ibm 1Websphere Automation For Ibm Cloud Pak For Watson Aiops Jun 17, 2026 Oct 7, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribute setting. IBM X-Force ID: 226449.
CVE-2022-22480 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Oct 7, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information disclosure. IBM X-Force ID: 225889.
CVE-2022-41294 1Ibm 1Robotic Process Automation Jun 17, 2026 Oct 6, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.0, 21.0.1, 21.0.2, 21.0.3, and 21.0.4 is vulnerable to cross origin resource sharing using the bot api. IBM X-Force ID: 236807.
CVE-2022-38709 1Ibm 1Robotic Process Automation For Cloud Pak Jun 17, 2026 Oct 6, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended f...Show more IBM Robotic Process Automation 21.0.1, 21.0.2, and 21.0.3 for Cloud Pak is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 234291.Show less
CVE-2022-36774 1Ibm 3Robotic Process Automation Robotic Process Automation As A ServiceRobotic Process Automation For Cloud Pak Jun 17, 2026 Oct 6, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to man in the middle attacks through manipulation of the client proxy configuration. IBM X-Force ID: 233575.
CVE-2022-22503 1Ibm 2Robotic Process Automation Robotic Process Automation As A Service Jun 17, 2026 Oct 6, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to...Show more IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 227125.Show less
CVE-2022-39168 1Ibm 3Robotic Process Automation Robotic Process Automation For Cloud PakRobotic Process Automation For Services Jun 17, 2026 Sep 29, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Robotic Process Automation Clients are vulnerable to proxy credentials being exposed in upgrade logs. IBM X-Force ID: 235422.
CVE-2015-1931 3Ibm RedhatSuse 8Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+5 more Nov 21, 2024 Sep 29, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information i...Show more IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.Show less

Previous 1...969798...413 Next