Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2012-4818 1Ibm 1Infosphere Information Server Nov 21, 2024 Sep 29, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerabilit...Show more IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.Show less
CVE-2012-2201 1Ibm 1Websphere Mq Nov 21, 2024 Sep 29, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and...Show more IBM WebSphere MQ 7.1 is vulnerable to a denial of service, caused by an error when handling user ids. A remote attacker could exploit this vulnerability to bypass the security configuration setup on a SVRCONN channel and flood the queue manager.Show less
CVE-2012-2160 1Ibm 1Rational Change Nov 21, 2024 Sep 29, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPP_TEMPLATE_FLAG parameter in a speciall...Show more IBM Rational Change 5.3 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability using the SUPP_TEMPLATE_FLAG parameter in a specially-crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.Show less
CVE-2011-4820 1Ibm 1Rational Asset Manager Nov 21, 2024 Sep 29, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Rational Asset Manager 7.5 could allow a remote attacker to bypass security restrictions. An attacker could exploit this vulnerability using the UID parameter to modify another user's preferences.
CVE-2022-36771 1Ibm 1Qradar User Behavior Analytics Jun 17, 2026 Sep 28, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM QRadar User Behavior Analytics could allow an authenticated user to obtain sensitive information from that they should not have access to. IBM X-Force ID: 232791.
CVE-2022-35722 1Ibm 1Jazz For Service Management Jun 17, 2026 Sep 28, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Jazz for Service Management is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231381.Show less
CVE-2022-35282 1Ibm 1Websphere Application Server Jun 17, 2026 Sep 28, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive data.Show less
CVE-2022-22387 1Ibm 1Application Gateway Jun 17, 2026 Sep 28, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials...Show more IBM Application Gateway is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 221965.Show less
CVE-2022-40748 1Ibm 1Infosphere Information Server Jun 17, 2026 Sep 23, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 236586.Show less
CVE-2022-35721 1Ibm 1Jazz For Service Management Jun 17, 2026 Sep 23, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...Show more IBM Jazz for Service Management 1.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 231380.Show less
CVE-2022-34348 1Ibm 1Sterling Partner Engagement Manager Jun 17, 2026 Sep 23, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or c...Show more IBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 230017.Show less
CVE-2022-22423 1Ibm 1Common Cryptographic Architecture Jun 17, 2026 Sep 23, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Common Cryptographic Architecture (CCA 5.x MTM for 4767 and CCA 7.x MTM for 4769) could allow a local user to cause a denial of service due to improper input validation. IBM X-Force ID: 223596.
CVE-2022-40616 1Ibm 1Maximo Asset Management Jun 17, 2026 Sep 21, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, and 7.6.1.3 could allow a user to bypass authentication and obtain sensitive information or perform tasks they should not have access to. IBM X-Force ID: 236311.
CVE-2022-40608 1Ibm 1Spectrum Protect Plus Jun 17, 2026 Sep 19, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore...Show more IBM Spectrum Protect Plus 10.1.6 through 10.1.11 Microsoft File Systems restore operation can download any file on the target machine by manipulating the URL with a directory traversal attack. This results in the restore operation gaining access to files which the operator should not have access to. IBM X-Force ID: 235873.Show less
CVE-2022-40234 1Ibm 1Spectrum Protect Plus Jun 17, 2026 Sep 19, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plu...Show more Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM Spectrum Protect Plus. If this generated .crt file is shared, an attacker can obtain the private key information for the uploaded certificate. IBM X-Force ID: 235718.Show less
CVE-2021-38924 1Ibm 2Maximo Application Suite Maximo Asset Management Jun 17, 2026 Sep 14, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further...Show more IBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 210163.Show less
CVE-2022-36768 1Ibm 2Aix Vios Jun 17, 2026 Sep 13, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to obtain root privileges. IBM X-Force ID: 232014.
CVE-2022-35637 1Ibm 1Db2 Jun 17, 2026 Sep 13, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service after entering a malformed SQL statement into the Db2expln tool. IBM X-Force ID: 230823.
CVE-2022-34356 1Ibm 2Aix Vios Jun 17, 2026 Sep 13, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to obtain root privileges. IBM X-Force ID: 230502.
CVE-2022-34336 1Ibm 1Websphere Application Server Jun 17, 2026 Sep 13, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality pot...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 229714.Show less

Previous 1...979899...413 Next