Ibm
ibm
8,252 CVEs • 1,572 products
Products (1,572)
Click to collapseToggle
Products (1,572)
Click to collapse
CVEs (8,252)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the Windows Registry in a manner which can be compromised. IBM X-Force ID: 118790. |
IBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in a directory they should not have access to due to improper access controls. IBM X-Force ID: 117926. |
IBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and large amounts of data using Domino TLS Key Exchange validation. IBM X-Force ID: 117918. |
1Ibm 1Security Privileged Identity Manager May 13, 2026 Jun 7, 2017 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 116171. |
1Ibm 1Security Privileged Identity Manager May 13, 2026 Jun 7, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer h...Show more |
1Ibm 1Security Access Manager 9.0 Firmware May 13, 2026 Jun 7, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714. |
1Ibm 1Security Access Manager 9.0 Firmware May 13, 2026 Jun 7, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462. |
1Ibm 1Cognos Business Intelligence May 13, 2026 Jun 7, 2017 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vul...Show more |
IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials d...Show more |
1Ibm 2Maximo Asset Management Maximo Asset Management EssentialsMay 13, 2026 May 26, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153. |
1Ibm 2Maximo Asset Management Maximo Asset Management EssentialsMay 13, 2026 May 26, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, onc...Show more |
1Ibm 1Tivoli Federated Identity Manager May 13, 2026 May 22, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadi...Show more |
IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memo...Show more |
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leadin...Show more |
1Ibm 1Business Process Manager May 13, 2026 May 22, 2017 N/A· v4 5.4 MEDIUM· v3 4.9 MEDIUM· v2 IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exp...Show more |
1Ibm 1Informix Open Admin Tool May 13, 2026 May 22, 2017 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers. IBM X-Force ID: 120390. |
1Ibm 3Distributed Marketing Marketing OperationsMarketing PlatformMay 13, 2026 May 22, 2017 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application. IBM X-Force ID: 118282...Show more |
1Ibm 1Qradar Security Information And Event Manager May 13, 2026 May 15, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user. IBM X-Force ID: 120207. |
1Ibm 7Rational Collaborative Lifecycle Management Rational Doors Next GenerationRational Engineering Lifecycle Manager+4 moreMay 13, 2026 May 15, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces. IBM X-Force ID: 119781, |
IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates, that results in the new instance not acc...Show more |