Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4560 1Ibm 1Financial Transaction Manager Jun 17, 2026 Aug 3, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2020-4554 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could expl...Show more IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183322.Show less
CVE-2020-4553 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could expl...Show more IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183321.Show less
CVE-2020-4552 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this v...Show more IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183320.Show less
CVE-2020-4551 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could expl...Show more IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183319.Show less
CVE-2020-4550 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could expl...Show more IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183318.Show less
CVE-2020-4549 1Ibm 1I2 Analysts Notebook Jun 17, 2026 Aug 3, 2020 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this v...Show more IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 183317.Show less
CVE-2020-4534 1Ibm 1Websphere Application Server Jun 17, 2026 Aug 3, 2020 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a speciall...Show more IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper handling of UNC paths. By scheduling a task with a specially-crafted UNC path, an attacker could exploit this vulnerability to execute arbitrary code with higher privileges. IBM X-Force ID: 182808.Show less
CVE-2020-4377 1Ibm 1Cognos Analytics Jun 17, 2026 Aug 3, 2020 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume mem...Show more IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 179156.Show less
CVE-2020-4328 1Ibm 1Financial Transaction Manager For Multiplatform Jun 17, 2026 Aug 3, 2020 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back...Show more IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 177839.Show less
CVE-2019-4589 1Ibm 1Cognos Analytics Jun 17, 2026 Aug 3, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to privlege escalation where the "My schedules and subscriptions" page is visible and accessible to a less privileged user. IBM X-Force ID: 167449.
CVE-2019-4366 1Ibm 1Cognos Analytics Jun 17, 2026 Aug 3, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser data. IBM X-Force ID: 161748.
CVE-2020-4186 1Ibm 1Security Guardium Jun 17, 2026 Jul 30, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Guardium 10.5, 10.6, and 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system. IBM X-Force ID: 174804.
CVE-2020-4185 1Ibm 1Security Guardium Jun 17, 2026 Jul 30, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium 10.5, 10.6, and 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 174803.
CVE-2020-4645 1Ibm 1Planning Analytics Local Jun 17, 2026 Jul 29, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia...Show more IBM Planning Analytics Local 2.0.0 through 2.0.9.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 185717.Show less
CVE-2020-4644 1Ibm 1Planning Analytics Local Jun 17, 2026 Jul 29, 2020 N/A· v4 5.4 MEDIUM· v3 5.8 MEDIUM· v2 IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vul...Show more IBM Planning Analytics Local 2.0.0 through 2.0.9.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 185716.Show less
CVE-2020-4574 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Jul 29, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 184181.
CVE-2020-4573 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Jul 29, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could disclose sensitive information due to responding to unauthenticated HTTP requests. IBM X-Force ID: 184180.
CVE-2020-4572 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Jul 29, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further a...Show more IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 184179.Show less
CVE-2020-4569 1Ibm 1Security Key Lifecycle Manager Jun 17, 2026 Jul 29, 2020 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mec...Show more IBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. IBM X-Force ID: 184158.Show less

Previous 1...155156157...413 Next