Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4832 1Ibm 1Powerha Jun 17, 2026 Feb 5, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM PowerHA 7.2 could allow a local attacker to obtain sensitive information from temporary directories after a discovery failure occurs. IBM X-Force ID: 189969.
CVE-2020-5032 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Feb 4, 2021 N/A· v4 4.3 MEDIUM· v3 3.3 LOW· v2 IBM QRadar SIEM 7.3 and 7.4 in some configurations may be vulnerable to a temporary denial of service attack when sent particular payloads. IBM X-Force ID: 194178.
CVE-2020-4828 1Ibm 1Api Connect Jun 17, 2026 Feb 4, 2021 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP request headers. IBM X-Force ID: 189842.
CVE-2020-4827 1Ibm 1Api Connect Jun 17, 2026 Feb 4, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user...Show more IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189841.Show less
CVE-2020-4826 1Ibm 1Api Connect Jun 17, 2026 Feb 4, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user...Show more IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 189840.Show less
CVE-2020-4825 1Ibm 1Api Connect Jun 17, 2026 Feb 4, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inten...Show more IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 189839.Show less
CVE-2020-4640 1Ibm 1Api Connect Jun 17, 2026 Feb 4, 2021 N/A· v4 4.1 MEDIUM· v3 3.8 LOW· v2 Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate...Show more Certain IBM API Connect 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.13 configurations can result in sensitive information in the URL fragment identifiers. This information can be cached in the intermediate nodes like proxy servers, cdn, logging platforms, etc. An attacker can make use of this information to perform attacks by impersonating a user. IBM X-Force ID: 185510.Show less
CVE-2020-4934 1Ibm 1Content Navigator Jun 17, 2026 Feb 2, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on th...Show more IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 191752.Show less
CVE-2020-4888 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jan 28, 2021 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deseria...Show more IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary commands on the system, caused by insecure deserialization of user-supplied content by the Java deserialization function. By sending a malicious serialized Java object, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 190912.Show less
CVE-2020-4682 1Ibm 3Mq Mq ApplianceWebsphere Mq Jun 17, 2026 Jan 28, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to e...Show more IBM MQ 7.5, 8.0, 9.0, 9.1, 9.2 LTS, and 9.2 CD could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization of trusted data. An attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 186509.Show less
CVE-2021-20357 1Ibm 11Collaborative Lifecycle Management Engineering InsightsEngineering Lifecycle Management+8 more Jun 17, 2026 Jan 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...Show more IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.Show less
CVE-2020-4952 1Ibm 1Security Guardium Jun 17, 2026 Jan 27, 2021 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 IBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.
CVE-2020-4865 1Ibm 11Collaborative Lifecycle Management Engineering InsightsEngineering Lifecycle Management+8 more Jun 17, 2026 Jan 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...Show more IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.Show less
CVE-2020-4855 1Ibm 11Collaborative Lifecycle Management Engineering InsightsEngineering Lifecycle Management+8 more Jun 17, 2026 Jan 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...Show more IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190457.Show less
CVE-2020-4789 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jan 27, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request co...Show more IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 189302.Show less
CVE-2020-4787 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jan 27, 2021 N/A· v4 2.3 LOW· v3 2.1 LOW· v2 IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests fr...Show more IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189224.Show less
CVE-2020-4786 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jan 27, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests fr...Show more IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 189221.Show less
CVE-2020-4547 1Ibm 11Collaborative Lifecycle Management Engineering InsightsEngineering Lifecycle Management+8 more Jun 17, 2026 Jan 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack t...Show more IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 183315.Show less
CVE-2020-4524 1Ibm 11Collaborative Lifecycle Management Engineering InsightsEngineering Lifecycle Management+8 more Jun 17, 2026 Jan 27, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credent...Show more IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182434.Show less
CVE-2020-4189 1Ibm 1Security Guardium Jun 17, 2026 Jan 27, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Guardium 11.2 discloses sensitive information in the response headers that could be used in further attacks against the system. IBM X-Force ID: 174850.

Previous 1...139140141...413 Next