Ibm
ibm
8,252 CVEs • 1,572 products
Products (1,572)
Click to collapseToggle
Products (1,572)
Click to collapse
CVEs (8,252)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A IBM Spectrum Protect 7.l client backup or archive operation running for an HP-UX VxFS object is silently skipping Access Control List (ACL) entries from backup or archive if there are more than twelve ACL entries assoc...Show more |
1Ibm 1Qradar Security Information And Event Manager Nov 21, 2024 Jul 22, 2019 N/A· v4 8.1 HIGH· v3 5.5 MEDIUM· v2 IBM QRadar SIEM 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 155350. |
IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on...Show more |
1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jul 17, 2019 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti...Show more |
1Ibm 1Jazz For Service Management Jun 17, 2026 Jul 17, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz for Service Management 1.1.3, 1.1.3.1, and 1.1.3.2 is missing function level access control that could allow a user to delete authorized resources. IBM X-Force ID: 159033. |
1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Jul 17, 2019 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM QRadar SIEM 7.2 and 7.3 could allow a local user to obtain sensitive information when exporting content that could aid an attacker in further attacks against the system. IBM X-Force ID: 156563. |
1Ibm 1Qradar Security Information And Event Manager Nov 21, 2024 Jul 17, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 155346. |
1Ibm 1Qradar Security Information And Event Manager Nov 21, 2024 Jul 17, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti...Show more |
IBM Campaign 9.1.0, 9.1.2, 10.1, and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...Show more |
IBM Content Navigator 3.0CD is vulnerable to local file inclusion, allowing an attacker to access a configuration file in the ICN server. IBM X-Force ID: 160015. |
1Ibm 1Jazz For Service Management Jun 17, 2026 Jul 11, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Jazz for Service Management 1.1.3 and 1.1.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header o...Show more |
1Ibm 1Cloud Application Performance Management Jun 17, 2026 Jul 11, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-side DNS lookups of arbitrary domain names. IBM X-Force ID: 158270. |
IBM Multicloud Manager 3.1.0, 3.1.1, and 3.1.2 ibm-mcm-chart could allow a local attacker with admin privileges to obtain highly sensitive information upon deployment. IBM X-Force ID: 158144. |
1Ibm 1Security Identity Manager Virtual Appliance Nov 21, 2024 Jul 11, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749. |
IBM Security Guardium 10.5 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable web server. IBM X-Force ID: 160698. |
IBM Daeja ViewONE Professional, Standard & Virtual 5.0 through 5.0.5 could allow an unauthorized user to download server files resulting in sensitive information disclosure. IBM X-Force ID: 160012. |
IBM Tivoli Storage Manager Server (IBM Spectrum Protect 7.1 and 8.1) could allow a local user to replace existing databases by restoring old data. IBM X-Force ID: 158336. |
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentia...Show more |
1Ibm 1Spectrum Protect Operations Center Jun 17, 2026 Jul 2, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error message containing a stack trace. By creating an error with a stack trace, an attacker...Show more |
1Ibm 1Spectrum Protect Operations Center Jun 17, 2026 Jul 2, 2019 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM Spectrum Protect Servers 7.1 and 8.1 and Storage Agents could allow a local attacker to gain elevated privileges on the system, caused by loading a specially crafted library loaded by the dsmqsan module. By setting u...Show more |