Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-29741 1Ibm 2Aix Vios Jun 17, 2026 Aug 2, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in Korn Shell (ksh) to gain root privileges. IBM X-Force ID: 201478.
CVE-2021-29781 1Ibm 1Partner Engagement Manager Jun 17, 2026 Jul 30, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulner...Show more IBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 203091.Show less
CVE-2021-29736 1Ibm 1Websphere Application Server Jun 17, 2026 Jul 30, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote user to gain elevated privileges on the system. IBM X-Force ID: 201300.
CVE-2021-20505 1Ibm 1Powervm Hypervisor Jun 17, 2026 Jul 29, 2021 N/A· v4 4.4 MEDIUM· v3 3.5 LOW· v2 The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic...Show more The PowerVM Logical Partition Mobility(LPM) (PowerVM Hypervisor FW920, FW930, FW940, and FW950) encryption key exchange protocol can be compromised. If an attacker has the ability to capture encrypted LPM network traffic and is able to gain service access to the FSP they can use this information to perform a series of PowerVM service procedures to decrypt the captured migration traffic IBM X-Force ID: 198232Show less
CVE-2020-5004 1Ibm 9Engineering Lifecycle Optimization Engineering Insights Engineering Requirements Quality Assistant On PremisesEngineering Test Management+6 more Jun 17, 2026 Jul 28, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden...Show more IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192957.Show less
CVE-2020-4974 1Ibm 9Engineering Lifecycle Optimization Engineering Insights Engineering Requirements Quality Assistant On PremisesEngineering Test Management+6 more Jun 17, 2026 Jul 28, 2021 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fac...Show more IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 192434.Show less
CVE-2021-20562 1Ibm 1Sterling B2b Integrator Jun 17, 2026 Jul 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus...Show more IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232.Show less
CVE-2021-20399 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jul 27, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...Show more IBM Qradar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196073.Show less
CVE-2021-29784 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks a...Show more IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 203168.Show less
CVE-2021-29770 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.
CVE-2021-29769 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http://...Show more IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 202769.Show less
CVE-2021-29767 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Jul 26, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i...Show more IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202681.Show less
CVE-2021-29766 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informatio...Show more IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 202680.Show less
CVE-2021-20560 1Ibm 1Sterling Connect Direct User Interface Jun 17, 2026 Jul 26, 2021 N/A· v4 5.4 MEDIUM· v3 4.9 MEDIUM· v2 IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker co...Show more IBM Sterling Connect:Direct Browser User Interface 1.4.1.1 and 1.5.0.2 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 199229.Show less
CVE-2021-20431 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Jul 26, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 does not invalidate session after logout which could allow an an attacker to obtain sensitive information from the system. IBM X-Force ID: 196342.
CVE-2021-20430 1Ibm 1I2 Analyze Jun 17, 2026 Jul 26, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This informatio...Show more IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196341.Show less
CVE-2021-20337 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jul 26, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.3.0 to 7.3.3 Patch 8 and 7.4.0 to 7.4.3 GA uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 194448.
CVE-2020-4623 1Ibm 1I2 Ibase Jun 17, 2026 Jul 26, 2021 N/A· v4 6.5 MEDIUM· v3 4.4 MEDIUM· v2 IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this...Show more IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. By using a specially-crafted .DLL file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 184984.Show less
CVE-2021-20478 1Ibm 1Cloud Pak System Jun 17, 2026 Jul 20, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497.
CVE-2021-29780 1Ibm 1Resilient Security Orchestration Automation And Response Jun 17, 2026 Jul 19, 2021 N/A· v4 4.7 MEDIUM· v3 6.5 MEDIUM· v2 IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.

Previous 1...124125126...413 Next