Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-29792 1Ibm 1Event Streams Jun 17, 2026 Jul 12, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. IBM X-Force ID: 203450.
CVE-2021-20414 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 12, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216.
CVE-2020-4938 1Ibm 1Mq Appliance Jun 17, 2026 Jul 12, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815...Show more IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815.Show less
CVE-2021-29730 1Ibm 1Infosphere Information Server Jun 17, 2026 Jul 9, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-...Show more IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164.Show less
CVE-2021-29712 1Ibm 1Infosphere Information Server Jun 17, 2026 Jul 9, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 200966.Show less
CVE-2021-29711 1Ibm 1Urbancode Deploy Jun 17, 2026 Jul 8, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade th...Show more IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allow an authenticated user with certain permissions to initiate an agent upgrade through the CLI interface. IBM X-Force ID: 200965.Show less
CVE-2021-29759 1Ibm 1App Connect Enterprise Certified Container Jun 17, 2026 Jul 7, 2021 N/A· v4 2.3 LOW· v3 2.1 LOW· v2 IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from internal log files. IBM X-Force ID: 202212.
CVE-2021-20474 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CVE-2021-20417 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attac...Show more IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196219Show less
CVE-2021-20416 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to...Show more IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A remote attacker could exploit this vulnerability to obtain sensitive information from the cookie. IBM X-Force ID: 196218.Show less
CVE-2021-20415 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217.
CVE-2021-20379 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 195711.
CVE-2021-20378 1Ibm 1Guardium Data Encryption Jun 17, 2026 Jul 7, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.
CVE-2020-4935 1Ibm 1Datacap Navigator Jun 17, 2026 Jul 1, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...Show more IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191753.Show less
CVE-2020-4902 1Ibm 1Datacap Navigator Jun 17, 2026 Jul 1, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete in...Show more IBM Datacap Taskmaster Capture (IBM Datacap Navigator 9.1.7) is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191045.Show less
CVE-2021-20461 2Ibm Netapp 2Cognos Analytics Oncommand Insight Jun 17, 2026 Jun 30, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behav...Show more IBM Cognos Analytics 10.0 and 11.1 is susceptible to a weakness in the implementation of the System Appearance configuration setting. An attacker could potentially bypass business logic to modify the appearance and behavior of the application. IBM X-Force ID: 196770.Show less
CVE-2021-20580 1Ibm 1Planning Analytics Jun 17, 2026 Jun 29, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force...Show more IBM Planning Analytics 2.0 could be vulnerable to cross-site request forgery (CSRF) which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 198241.Show less
CVE-2021-20490 1Ibm 1Spectrum Protect Plus Jun 17, 2026 Jun 29, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791.
CVE-2021-20477 1Ibm 1Planning Analytics Jun 17, 2026 Jun 29, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...Show more IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949.Show less
CVE-2021-29775 1Ibm 2Business Automation Workflow Cloud Pak For Automation Jun 17, 2026 Jun 28, 2021 N/A· v4 5.4 MEDIUM· v3 4.3 MEDIUM· v2 IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the...Show more IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 203029.Show less

Previous 1...127128129...413 Next