Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-2879 1Ibm 1Qradar Security Information And Event Manager May 13, 2026 Mar 1, 2017 N/A· v4 7.8 HIGH· v3 2.1 LOW· v2 IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM Reference #: 1997341.
CVE-2016-9975 1Ibm 1Dashboard Application Services Hub May 13, 2026 Feb 24, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. I...Show more IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM Reference #: 1998714.Show less
CVE-2016-9009 1Ibm 1Websphere Mq May 13, 2026 Feb 24, 2017 N/A· v4 3.1 LOW· v3 4.0 MEDIUM· v2 IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clustering. IBM Reference #: 1998647.
CVE-2016-8998 1Ibm 1Tivoli Storage Manager May 13, 2026 Feb 24, 2017 N/A· v4 7.2 HIGH· v3 6.0 MEDIUM· v2 IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Refer...Show more IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference #: 1998747.Show less
CVE-2016-8974 1Ibm 1Rational Rhapsody Design Manager May 13, 2026 Feb 23, 2017 N/A· v4 8.1 HIGH· v3 7.5 HIGH· v2 IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly...Show more IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997798.Show less
CVE-2016-6055 1Ibm 2Rational Doors Next Generation Rational Requirements Composer May 13, 2026 Feb 23, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent...Show more IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1995515.Show less
CVE-2016-5883 1Ibm 1Inotes May 13, 2026 Feb 23, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials d...Show more IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1997010.Show less
CVE-2016-8986 1Ibm 1Websphere Mq May 13, 2026 Feb 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HTTP requests. IBM Reference #: 1998648.
CVE-2016-8915 1Ibm 1Websphere Mq May 13, 2026 Feb 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running under the same process. IBM Reference #: 1998649.
CVE-2016-3052 1Ibm 1Websphere Mq May 13, 2026 Feb 22, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network. This data could be intercepted using man in the middle techniques.
CVE-2016-3013 1Ibm 1Websphere Mq May 13, 2026 Feb 22, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference #: 1998661.
CVE-2016-6062 1Ibm 1Resilient May 13, 2026 Feb 16, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading t...Show more IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference#: 213457065.Show less
CVE-2016-5919 1Ibm 4Security Access Manager 9.0 Firmware Security Access Manager For MobileSecurity Access Manager For Web 7.0 Firmware+1 more May 13, 2026 Feb 16, 2017 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM Reference #: 1996868.
CVE-2016-9706 1Ibm 2Integration Bus Websphere Message Broker May 13, 2026 Feb 15, 2017 N/A· v4 9.1 CRITICAL· v3 8.5 HIGH· v2 IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could expl...Show more IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1997918.Show less
CVE-2016-9010 1Ibm 2Integration Bus Websphere Message Broker May 13, 2026 Feb 15, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerabilit...Show more IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.Show less
CVE-2016-8972 1Ibm 2Aix Vios May 13, 2026 Feb 15, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client. IBM APARs: IV91006, IV91007, IV91008, IV91010, IV91011.
CVE-2016-8968 1Ibm 1Rational Collaborative Lifecycle Management May 13, 2026 Feb 15, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...Show more IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1998515.Show less
CVE-2016-8944 1Ibm 1Aix May 13, 2026 Feb 15, 2017 N/A· v4 5.5 MEDIUM· v3 4.9 MEDIUM· v2 IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system. IBM APARs: IV91488, IV91487, IV91456, IV90234.
CVE-2016-6079 1Ibm 2Aix Vios May 13, 2026 Feb 15, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges. IBM APARs: IV88658, IV87981, IV88419, IV87640, IV88053.
CVE-2016-6077 1Ibm 1Cognos Disclosure Management May 13, 2026 Feb 15, 2017 N/A· v4 5.3 MEDIUM· v3 6.8 MEDIUM· v2 IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious document. IBM Reference #: 1991584.

Previous 1...252253254...413 Next