Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-1550 1Ibm 1Sterling File Gateway May 13, 2026 Dec 11, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords. IBM X-Force ID: 131290.
CVE-2017-1549 1Ibm 1Sterling File Gateway May 13, 2026 Dec 11, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to creden...Show more IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 131289.Show less
CVE-2017-1548 1Ibm 1Sterling File Gateway May 13, 2026 Dec 11, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on t...Show more IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 131288.Show less
CVE-2017-1536 1Ibm 1Websphere Portal May 13, 2026 Dec 11, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the inten...Show more IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130733.Show less
CVE-2017-1507 1Ibm 7Rational Collaborative Lifecycle Management Rational Doors Next GenerationRational Engineering Lifecycle Manager+4 more May 13, 2026 Dec 11, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz Foundation Products could disclose sensitive information during a scan that could lead to further attacks against the system. IBM X-Force ID: 129619.
CVE-2017-1498 1Ibm 1Connections May 13, 2026 Dec 7, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...Show more IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 129020.Show less
CVE-2017-1497 1Ibm 1Sterling File Gateway May 13, 2026 Dec 7, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file. IBM X-Force ID: 128695.
CVE-2017-1487 1Ibm 1Sterling File Gateway May 13, 2026 Dec 7, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626.
CVE-2017-1482 1Ibm 1Sterling B2b Integrator May 13, 2026 Dec 7, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentiall...Show more IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 128620.Show less
CVE-2017-1481 1Ibm 1Sterling B2b Integrator May 13, 2026 Dec 7, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user. IBM X-Force ID: 128619.
CVE-2017-1465 1Ibm 1Tririga Application Platform May 13, 2026 Dec 7, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hi...Show more IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM X-Force ID: 128464.Show less
CVE-2017-1433 1Ibm 1Websphere Mq May 13, 2026 Dec 7, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which would cause it to restart. IBM X-Force ID: 127803.
CVE-2017-1356 1Ibm 1Atlas Ediscovery Process Management May 13, 2026 Dec 7, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in th...Show more IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 126683.Show less
CVE-2017-1355 1Ibm 1Atlas Ediscovery Process Management May 13, 2026 Dec 7, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or br...Show more IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 126682.Show less
CVE-2017-1354 1Ibm 1Atlas Ediscovery Process Management May 13, 2026 Dec 7, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially l...Show more IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 126681.Show less
CVE-2017-1353 1Ibm 1Atlas Ediscovery Process Management May 13, 2026 Dec 7, 2017 N/A· v4 3.5 LOW· v3 3.5 LOW· v2 IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links. IBM X-Force ID: 126680.
CVE-2017-1342 1Ibm 1Insights Foundation For Energy May 13, 2026 Dec 7, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to conduct further attacks. IBM X-Force ID: 126457.
CVE-2017-1341 1Ibm 1Websphere Mq May 13, 2026 Dec 7, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access. IBM X-Force ID: 126456.
CVE-2017-1336 1Ibm 1Infosphere Biginsights May 13, 2026 Dec 7, 2017 N/A· v4 4.4 MEDIUM· v3 3.6 LOW· v2 IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files. IBM X-Force ID: 126244.
CVE-2017-1271 1Ibm 1Security Guardium May 13, 2026 Dec 7, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but...Show more IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties. IBM X-Force ID: 124746.Show less

Previous 1...229230231...413 Next