Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-39058 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 214617.
CVE-2021-39054 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this v...Show more IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 214525.Show less
CVE-2021-39053 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending...Show more IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524.Show less
CVE-2021-39052 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523.
CVE-2021-38947 1Ibm 1Spectrum Copy Data Management Jun 17, 2026 Dec 13, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 211242.
CVE-2021-38937 1Ibm 1Powervm Hypervisor Jun 17, 2026 Dec 10, 2021 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 IBM PowerVM Hypervisor FW940, FW950, and FW1010 could allow an authenticated user to cause the system to crash using a specially crafted IBMi Hypervisor call. IBM X-Force ID: 210894.
CVE-2021-38917 1Ibm 1Powervm Hypervisor Jun 17, 2026 Dec 10, 2021 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-...Show more IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018.Show less
CVE-2021-39002 2Ibm Netapp 2Db2 Oncommand Insight Jun 17, 2026 Dec 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2021-38951 1Ibm 1Websphere Application Server Jun 17, 2026 Dec 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consu...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume all available CPU resources. IBM X-Force ID: 211405.Show less
CVE-2021-38931 2Ibm Netapp 2Db2 Oncommand Insight Jun 17, 2026 Dec 9, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not author...Show more IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1, and 11.5 is vulnerable to an information disclosure as a result of a connected user having indirect read access to a table where they are not authorized to select from. IBM X-Force ID: 210418.Show less
CVE-2021-38926 2Ibm Netapp 2Db2 Oncommand Insight Jun 17, 2026 Dec 9, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210...Show more IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to gain privileges due to allowing modification of columns of existing tasks. IBM X-Force ID: 210321.Show less
CVE-2021-29678 2Ibm Netapp 2Db2 Oncommand Insight Jun 17, 2026 Dec 9, 2021 N/A· v4 8.7 HIGH· v3 5.5 MEDIUM· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority to access other databases and read or modify files. IBM X-Force ID: 199914.
CVE-2021-20373 1Ibm 1Db2 Jun 17, 2026 Dec 9, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID:...Show more IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. IBM X-Force ID: 199521.Show less
CVE-2021-38909 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706.Show less
CVE-2021-29867 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 5.4 MEDIUM· v3 5.5 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated to view or edit a Jupyter notebook that they should not have access to. IBM X-Force ID: 206212.
CVE-2021-29756 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the...Show more IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167.Show less
CVE-2021-29719 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 could be vulnerable to client side vulnerabilties due to a web response specifying an incorrect content type. IBM X-Force ID: 201091
CVE-2021-29716 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 could allow a low level user to reas of the application that privileged user should only be allowed to view. IBM X-Force ID: 201087.
CVE-2021-20493 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794.Show less
CVE-2021-20470 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Dec 3, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.

Previous 1...114115116...413 Next