Ibm
ibm
8,252 CVEs • 1,572 products
Products (1,572)
Click to collapseToggle
Products (1,572)
Click to collapse
CVEs (8,252)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ibm 3Emptoris Contract Management Emptoris SourcingEmptoris Spend AnalysisJun 17, 2026 Aug 20, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could...Show more |
1Ibm 3Emptoris Contract Management Emptoris SourcingEmptoris Spend AnalysisJun 17, 2026 Aug 20, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 generates an error message that includes sensitive information that could...Show more |
1Ibm 2Emptoris Contract Management Emptoris Spend AnalysisJun 17, 2026 Aug 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the att...Show more |
1Ibm 2Emptoris Contract Management Emptoris Spend AnalysisJun 17, 2026 Aug 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the att...Show more |
IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) t...Show more |
1Ibm 2Infosphere Global Name Management Infosphere Identity InsightJun 17, 2026 Aug 20, 2019 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit t...Show more |
1Ibm 2Business Automation Workflow Business Process ManagerJun 17, 2026 Aug 20, 2019 N/A· v4 5.7 MEDIUM· v3 3.5 LOW· v2 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecting users. IBM X-Force...Show more |
1Ibm 3Intelligent Operations Center Intelligent Operations Center For Emergency ManagementWater Operations For WaternamicsJun 17, 2026 Aug 20, 2019 N/A· v4 6.2 MEDIUM· v3 2.1 LOW· v2 IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 162738. |
1Ibm 3Intelligent Operations Center Intelligent Operations Center For Emergency ManagementWater Operations For WaternamicsJun 17, 2026 Aug 20, 2019 N/A· v4 8.2 HIGH· v3 6.4 MEDIUM· v2 IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive info...Show more |
IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263. |
1Ibm 1Security Guardium Big Data Intelligence Jun 17, 2026 Aug 20, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036. |
1Ibm 3Emptoris Contract Management Emptoris SourcingEmptoris Spend AnalysisJun 17, 2026 Aug 20, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive information from err...Show more |
1Ibm 2Datapower Gateway Mq ApplianceJun 17, 2026 Aug 20, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attacker to execute arbitr...Show more |
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local privileged Informix user to load a malicious shared library and gain root access privileges. IBM X-Force ID: 159941. |
IBM Cloud Private 3.1.1 and 3.1.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 1...Show more |
IBM MQ 9.1.0.0, 9.1.0.1, 9.1.1, and 9.1.0.2 is vulnerable to a denial of service due to a local user being able to fill up the disk space of the underlying filesystem using the error logging service. IBM X-Force ID: 1563...Show more |
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user to load malicious libraries and gain root privileges. IBM X-Force ID: 149426. |
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force I...Show more |
Stack-based buffer overflow in oninit in IBM Informix Dynamic Server Enterprise Edition 12.1 allows an authenticated user to execute predefined code with root privileges, such as escalating to a root shell. IBM X-Force I...Show more |
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME. IBM X-Force ID:...Show more |