Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-4561 1Ibm 1Security Identity Manager Jun 17, 2026 Nov 20, 2019 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an...Show more IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 166456.Show less
CVE-2019-4530 1Ibm 1Maximo Asset Management Jun 17, 2026 Nov 20, 2019 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 IBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be able to. IBM X-Force ID: 165586.
CVE-2019-4652 1Ibm 1Spectrum Protect Plus Jun 17, 2026 Nov 12, 2019 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions....Show more IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963.Show less
CVE-2019-4645 1Ibm 1Cognos Analytics Jun 17, 2026 Nov 9, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to c...Show more IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170881.Show less
CVE-2019-4581 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Nov 9, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr...Show more IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 167239.Show less
CVE-2019-4556 1Ibm 1Qradar Advisor With Watson Jun 17, 2026 Nov 9, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID:...Show more IBM QRadar Advisor 1.0.0 through 2.4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 166205.Show less
CVE-2019-4509 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Nov 9, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to incorrect authorization in some components which could allow an authenticated user to obtain sensitive information. IBM X-Force ID: 164430.
CVE-2019-4470 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Nov 9, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr...Show more IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163779.Show less
CVE-2019-4454 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Nov 9, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cr...Show more IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163618.Show less
CVE-2019-4450 1Ibm 1I Jun 17, 2026 Nov 9, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden...Show more IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163492.Show less
CVE-2019-4412 1Ibm 1Cognos Controller Jun 17, 2026 Nov 9, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-For...Show more IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162659.Show less
CVE-2019-4411 1Ibm 1Cognos Controller Jun 17, 2026 Nov 9, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cognos Controller 10.3.0, 10.3.1, 10.4.0, and 10.4.1 could allow an authenticated user to obtain sensitive information due to easy to guess session identifier names. IBM X-Force ID: 162658.
CVE-2019-4334 1Ibm 1Cognos Analytics Jun 17, 2026 Nov 9, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Cognos Analytics 11.0 and 11.1 could reveal sensitive information to an authenticated user that could be used in future attacks against the system. IBM X-Force ID: 161271.
CVE-2018-1721 1Ibm 1Cognos Analytics Nov 21, 2024 Nov 9, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or cause the w...Show more IBM Cognos Analytics 11.0 and 11.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or cause the web server to make HTTP requests to arbitrary domains. IBM X-Force ID: 147369.Show less
CVE-2019-4600 1Ibm 1Api Connect Jun 17, 2026 Oct 29, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
CVE-2019-4546 1Ibm 2Maximo For Oil And Gas Maximo Health, Safety And Environment Manager Jun 17, 2026 Oct 29, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 After installing the IBM Maximo Health- Safety and Environment Manager 7.6.1, a user is granted additional privileges that they are not normally allowed to access. IBM X-Force ID: 165948.
CVE-2019-4339 1Ibm 1Security Guardium Big Data Intelligence Jun 17, 2026 Oct 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 161418.
CVE-2019-4330 1Ibm 1Security Guardium Big Data Intelligence Jun 17, 2026 Oct 29, 2019 N/A· v4 4.3 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Fo...Show more IBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session. IBM X-Force ID: 161210.Show less
CVE-2019-4329 1Ibm 1Security Guardium Big Data Intelligence Jun 17, 2026 Oct 29, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity...Show more IBM Security Guardium Big Data Intelligence (SonarG) 4.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 161209.Show less
CVE-2019-4314 1Ibm 1Security Guardium Big Data Intelligence Jun 17, 2026 Oct 29, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium Big Data Intelligence (SonarG) 4.0 stores sensitive information in cleartext within a resource that might be accessible to another control sphere. IBM X-Force ID: 1610141.

Previous 1...174175176...413 Next