Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-4360 1Ibm 1Planning Analytics Local Jun 17, 2026 Jun 2, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178765.Show less
CVE-2020-4490 1Ibm 2Business Automation Workflow Business Process Manager Jun 17, 2026 May 29, 2020 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit...Show more IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw. An attacker could exploit this vulnerability and redirect a vitcim to a phishing site. IBM X-Force ID: 181989Show less
CVE-2020-4352 1Ibm 1Mq For Hpe Nonstop Jun 17, 2026 May 29, 2020 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427.
CVE-2020-4306 1Ibm 1Planning Analytics Local Jun 17, 2026 May 29, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...Show more IBM Planning Analytics Local 2.0.0 through 2.0.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 176735.Show less
CVE-2020-4248 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...Show more IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484.Show less
CVE-2020-4419 1Ibm 1Jazz Reporting Service Jun 17, 2026 May 28, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentia...Show more IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 180071.Show less
CVE-2020-4249 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485.
CVE-2020-4246 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 7.1 HIGH· v3 5.5 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive info...Show more IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481.Show less
CVE-2020-4245 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 175423.
CVE-2020-4244 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumeration. IBM X-Force ID: 175422.
CVE-2020-4233 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its...Show more IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360.Show less
CVE-2020-4232 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 17...Show more IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336.Show less
CVE-2020-4231 1Ibm 1Security Identity Governance And Intelligence Jun 17, 2026 May 28, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous input validation. IBM X-Force ID: 175335.
CVE-2020-4379 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 179158.
CVE-2020-4378 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a privileged authenticated user to perform unauthorized actions using a specially crated HTTP POST command. IBM X-Force ID: 179157.
CVE-2020-4358 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially lead...Show more IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 178762.Show less
CVE-2020-4357 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attac...Show more IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 178761.Show less
CVE-2020-4350 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178424.
CVE-2020-4349 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Spectrum Scale 5.0.0.0 through 5.0.4.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 178423.
CVE-2020-4348 1Ibm 1Spectrum Scale Jun 17, 2026 May 27, 2020 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Spectrum Scale 4.2.0.0 through 4.2.3.21 and 5.0.0.0 through 5.0.4.4 could allow an authenticated GUI user to perform unauthorized actions due to missing function level access control. IBM X-Force ID: 178414

Previous 1...161162163...413 Next