Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-29750 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Sep 15, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201778.
CVE-2021-20433 1Ibm 1Security Guardium Jun 17, 2026 Sep 15, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against the system. IBM X-Force ID: 196345.
CVE-2021-29841 1Ibm 1Financial Transaction Manager Jun 17, 2026 Sep 14, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205045.Show less
CVE-2021-20582 1Ibm 1Security Secret Server Jun 17, 2026 Sep 14, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser hi...Show more IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 199328.Show less
CVE-2021-20569 1Ibm 1Security Secret Server Jun 17, 2026 Sep 14, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation. IBM X-Force ID: 199243.
CVE-2021-20508 1Ibm 1Security Secret Server Jun 17, 2026 Sep 14, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks ag...Show more IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 199322.Show less
CVE-2021-29853 1Ibm 1Planning Analytics Jun 17, 2026 Sep 1, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some methods or functions. IBM X-Force ID: 205529.
CVE-2021-29852 1Ibm 1Planning Analytics Jun 17, 2026 Sep 1, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...Show more IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205528.Show less
CVE-2021-29851 1Ibm 1Planning Analytics Jun 17, 2026 Sep 1, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 205527.
CVE-2021-29907 1Ibm 1Openpages With Watson Jun 17, 2026 Aug 31, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system. IBM X-Force ID: 207633.
CVE-2021-29743 1Ibm 2Maximo Application Suite Maximo Asset Management Jun 17, 2026 Aug 30, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia...Show more IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 201693.Show less
CVE-2021-29728 1Ibm 2Sterling External Authentication Server Sterling Secure Proxy Jun 17, 2026 Aug 30, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external...Show more IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 201160.Show less
CVE-2021-29723 1Ibm 2Sterling External Authentication Server Sterling Secure Proxy Jun 17, 2026 Aug 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-ForceID: 201100.
CVE-2021-29722 1Ibm 2Sterling External Authentication Server Sterling Secure Proxy Jun 17, 2026 Aug 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 201095.
CVE-2021-29744 1Ibm 2Maximo Application Suite Maximo Asset Management Jun 17, 2026 Aug 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lea...Show more IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 201694.Show less
CVE-2021-29862 1Ibm 2Aix Vios Jun 17, 2026 Aug 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 206086.
CVE-2021-29801 1Ibm 2Aix Vios Jun 17, 2026 Aug 26, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges. IBM X-Force ID: 203977.
CVE-2021-29772 1Ibm 1Api Connect Jun 17, 2026 Aug 26, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.
CVE-2021-29727 1Ibm 2Aix Vios Jun 17, 2026 Aug 26, 2021 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service. IBM X-Force ID: 201106.
CVE-2021-29715 1Ibm 1Api Connect Jun 17, 2026 Aug 26, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due to open ports. IBM X-Force ID: 201018.

Previous 1...122123124...413 Next