Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-22360 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulne...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources. IBM X-Force ID: 220782.Show less
CVE-2022-22359 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 220652.Show less
CVE-2022-22358 1Ibm 2Partner Engagement Manager Partner Engagement Manager On Cloud/saas Jun 17, 2026 Jul 19, 2022 N/A· v4 7.1 HIGH· v3 N/A· v2 IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expos...Show more IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 220651.Show less
CVE-2022-22445 1Ibm 1Powervm Hypervisor Jun 17, 2026 Jul 18, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An attacker that gains service access to the FSP (POWER9 only) or gains admin authority to a partition can compromise partition firmware.
CVE-2021-38868 1Ibm 1Engineering Requirements Quality Assistant On Premises Jun 17, 2026 Jul 18, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user th...Show more IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force Id: 208310.Show less
CVE-2021-29799 1Ibm 1Engineering Requirements Quality Assistant On Premises Jun 17, 2026 Jul 18, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Quality Assistant On-Premises (All versions) could allow an authenticated user to obtain sensitive information due to improper client side validation. IBM X-Force ID: 203738.
CVE-2021-29790 1Ibm 1Engineering Requirements Quality Assistant On Premises Jun 17, 2026 Jul 18, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...Show more IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203440.Show less
CVE-2021-29788 1Ibm 1Engineering Requirements Quality Assistant On Premises Jun 17, 2026 Jul 18, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended...Show more IBM Engineering Requirements Quality Assistant On-Premises (All versions) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203310.Show less
CVE-2022-22460 1Ibm 1Security Verify Governance Jun 17, 2026 Jul 14, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225013.
CVE-2022-22453 1Ibm 1Security Verify Governance Jun 17, 2026 Jul 14, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919.
CVE-2022-22452 1Ibm 1Security Verify Governance Jun 17, 2026 Jul 14, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918.
CVE-2022-22450 1Ibm 1Security Verify Governance Jun 17, 2026 Jul 14, 2022 N/A· v4 3.8 LOW· v3 N/A· v2 IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916.
CVE-2022-35283 1Ibm 1Security Verify Information Queue Jun 17, 2026 Jul 14, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Security Verify Information Queue 10.0.2 could allow an authenticated user to cause a denial of service with a specially crafted HTTP request.
CVE-2022-22477 1Ibm 1Websphere Application Server Jun 17, 2026 Jul 14, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...Show more IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 225605.Show less
CVE-2022-22473 1Ibm 1Websphere Application Server Jun 17, 2026 Jul 14, 2022 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.Show less
CVE-2021-39028 1Ibm 2Engineering Lifecycle Optimization Publishing Engineering Lifecycle Optimization Publishing Jun 17, 2026 Jul 14, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker t...Show more IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 213866.Show less
CVE-2021-39019 1Ibm 2Engineering Lifecycle Optimization Publishing Engineering Lifecycle Optimization Publishing Jun 17, 2026 Jul 14, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose highly sensitive information through an HTTP GET request to an authenticated user. IBM X-Force ID: 213728.
CVE-2021-39018 1Ibm 2Engineering Lifecycle Optimization Publishing Engineering Lifecycle Optimization Publishing Jun 17, 2026 Jul 14, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID:...Show more IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could disclose sensitive information in a SQL error message that could aid in further attacks against the system. IBM X-Force ID: 213726.Show less
CVE-2021-39017 1Ibm 2Engineering Lifecycle Optimization Publishing Engineering Lifecycle Optimization Publishing Jun 17, 2026 Jul 14, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to upload arbitrary files, caused by improper access controls. IBM X-Force ID: 213725.
CVE-2021-39016 1Ibm 2Engineering Lifecycle Optimization Publishing Engineering Lifecycle Optimization Publishing Jun 17, 2026 Jul 14, 2022 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit m...Show more IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 does not sufficiently monitor or control transmitted network traffic volume, so that an actor can cause the software to transmit more traffic than should be allowed for that actor. IBM X-Force ID: 213722.Show less

Previous 1...101102103...413 Next