Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4967 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks against the system. IBM X-Force ID: 192425.
CVE-2020-4820 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...Show more IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2020-4816 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerabili...Show more IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 189703.Show less
CVE-2020-4815 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be used in further attacks against the system.
CVE-2020-4628 1Ibm 1Cloud Pak For Security Jun 17, 2026 Jan 27, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in fu...Show more IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 185369.Show less
CVE-2020-27583 1Ibm 1Infosphere Information Server Jun 17, 2026 Jan 26, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that...Show more IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticated attackers to execute arbitrary code. NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less
CVE-2020-4949 1Ibm 1Websphere Application Server Jun 17, 2026 Jan 26, 2021 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive info...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192025.Show less
CVE-2020-4889 1Ibm 1Spectrum Scale Jun 17, 2026 Jan 26, 2021 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development efforts. IBM X-Force ID: 190971.
CVE-2020-4766 1Ibm 1Mq Internet Pass Thru Jun 17, 2026 Jan 22, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which would consume all available resources. IBM X-Force ID: 188093.
CVE-2020-4969 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 Jan 21, 2021 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit th...Show more IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.Show less
CVE-2020-4968 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 Jan 21, 2021 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 192427.
CVE-2020-4966 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 Jan 21, 2021 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or...Show more IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 192423.Show less
CVE-2020-4958 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 Jan 21, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources. IBM X-Force ID: 192209.
CVE-2020-4983 1Ibm 2Spectrum Lsf Spectrum Lsf Suite Jun 17, 2026 Jan 20, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execute arbitrary commands. IBM X-Force ID: 192586.
CVE-2020-4921 1Ibm 1Security Guardium Jun 17, 2026 Jan 20, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end...Show more IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 191398.Show less
CVE-2020-4887 1Ibm 2Aix Vios Jun 17, 2026 Jan 20, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911.
CVE-2020-4688 1Ibm 1Security Guardium Jun 17, 2026 Jan 20, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused by command injection vulnerability. IBM X-Force ID: 186700.
CVE-2020-4881 1Ibm 1Planning Analytics Jun 17, 2026 Jan 19, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker...Show more IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification for SSL/TLS communication. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 190851.Show less
CVE-2020-4873 1Ibm 1Planning Analytics Jun 17, 2026 Jan 19, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: 190836.
CVE-2020-4871 1Ibm 1Planning Analytics Jun 17, 2026 Jan 19, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834.

Previous 1...140141142...413 Next