Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-39082 1Ibm 1Urbancode Deploy Jun 17, 2026 Apr 29, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM UrbanCode Deploy (UCD) 7.1.1.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2022-22443 1Ibm 1Infosphere Information Server Jun 17, 2026 Apr 28, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440.Show less
CVE-2022-22441 1Ibm 1Infosphere Information Server Jun 17, 2026 Apr 28, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426.
CVE-2022-22427 1Ibm 1Infosphere Information Server Jun 17, 2026 Apr 28, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720.Show less
CVE-2022-22322 1Ibm 1Infosphere Information Server Jun 17, 2026 Apr 28, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370.Show less
CVE-2021-38952 1Ibm 1Infosphere Information Server Jun 17, 2026 Apr 28, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408.Show less
CVE-2022-22315 1Ibm 1Urbancode Deploy Jun 17, 2026 Apr 27, 2022 N/A· v4 8.8 HIGH· v3 6.0 MEDIUM· v2 IBM UrbanCode Deploy (UCD) 7.2.2.1 could allow an authenticated user with special permissions to obtain elevated privileges due to improper handling of permissions. IBM X-Force ID: 217955.
CVE-2022-22345 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...Show more IBM QRadar 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 220041.Show less
CVE-2022-22323 1Ibm 1Security Verify Password Synchronization Jun 17, 2026 Apr 27, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An auth...Show more IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 218379.Show less
CVE-2022-22312 1Ibm 1Security Verify Password Synchronization Jun 17, 2026 Apr 27, 2022 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An auth...Show more IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.Show less
CVE-2021-38939 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3, 7.4, and 7.5 stores potentially sensitive information in log files that could be read by an user with access to creating domains. IBM X-Force ID: 211037.
CVE-2021-38919 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021
CVE-2021-38878 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar 7.3, 7.4, and 7.5 could allow a malicious actor to impersonate an actor due to key exchange without entity authentication. IBM X-Force ID: 208756.
CVE-2021-38874 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar SIEM 7.3, 7.4, and 7.5 allows for users to access information across tenant and domain boundaries in some situations. IBM X-Force ID: 208397.
CVE-2021-38869 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM QRadar SIEM 7.3, 7.4, and 7.5 in some situations may not automatically log users out after they exceede their idle timeout. IBM X-Force ID: 208341.
CVE-2021-34587 2Bender Ibm 5 Ibm Rational Lifecycle Integration Adapter For Windchill Cc612 FirmwareCc613 Firmware+2 more Jun 17, 2026 Apr 27, 2022 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In Bender/ebee Charge Controllers in multiple versions a long URL could lead to webserver crash. The URL is used as input of an sprintf to a stack variable.
CVE-2021-29776 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Apr 27, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030.
CVE-2022-22392 1Ibm 1Planning Analytics Workspace Jun 17, 2026 Apr 25, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 IBM Planning Analytics Local 2.0 could allow an attacker to upload arbitrary executable files which, when executed by an unsuspecting victim could result in code execution. IBM X-Force ID: 222066.
CVE-2021-39040 1Ibm 1Planning Analytics Workspace Jun 17, 2026 Apr 25, 2022 N/A· v4 8.0 HIGH· v3 6.0 MEDIUM· v2 IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system a...Show more IBM Planning Analytics Workspace 2.0 could be vulnerable to malicious file upload by not validating the file types or sizes. Attackers can make use of this weakness and upload malicious executable files into the system and it can be sent to victim for performing further attacks. IBM X-Force ID: 214025.Show less
CVE-2021-3897 2Ibm Lenovo 5Nextscale Fan Power Controller Firmware Nextscale N1200 Enclosure FirmwareThinkagile Hx Enclosure Certified Node Firmware+2 more Jun 17, 2026 Apr 22, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated att...Show more An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Management Module (SMM) firmware during an that could allow an unauthenticated attacker to execute commands on the SMM and FPC2. SMM2 is not affected.Show less

Previous 1...107108109...413 Next