Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-6123 1Ibm 1Kenexa Lms On Cloud May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially...Show more IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6122 1Ibm 1Kenexa Lms On Cloud May 13, 2026 Feb 1, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users.
CVE-2016-6113 1Ibm 2Domino Inotes May 13, 2026 Feb 1, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wit...Show more IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6090 1Ibm 1Websphere Commerce May 13, 2026 Feb 1, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial of service.
CVE-2016-6085 1Ibm 1Bigfix Platform May 13, 2026 Feb 1, 2017 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers.
CVE-2016-6084 1Ibm 1Bigfix Platform May 13, 2026 Feb 1, 2017 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request.
CVE-2016-6082 1Ibm 1Bigfix Platform May 13, 2026 Feb 1, 2017 N/A· v4 10.0 CRITICAL· v3 10.0 HIGH· v2 IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition. An attacker could exploit this vulnerability to execute arbitrary code on the system.
CVE-2016-6080 1Ibm 1Websphere Message Broker May 13, 2026 Feb 1, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker.
CVE-2016-6072 1Ibm 12Maximo Asset Management Maximo For AviationMaximo For Life Sciences+9 more May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credenti...Show more IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6065 1Ibm 1Security Guardium May 13, 2026 Feb 1, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
CVE-2016-6061 1Ibm 1Rational Collaborative Lifecycle Management May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...Show more IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6059 1Ibm 3Infosphere Datastage Infosphere Information ServerInfosphere Information Server On Cloud May 13, 2026 Feb 1, 2017 N/A· v4 8.1 HIGH· v3 7.5 HIGH· v2 IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly...Show more IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.Show less
CVE-2016-6054 1Ibm 1Jazz Reporting Service May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disc...Show more IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6047 1Ibm 1Jazz Reporting Service May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6046 1Ibm 1Tivoli Storage Manager May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially le...Show more IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-6045 1Ibm 1Tivoli Storage Manager May 13, 2026 Feb 1, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2016-6044 1Ibm 1Tivoli Storage Manager May 13, 2026 Feb 1, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which may let the attacker violate security policy.
CVE-2016-6043 1Ibm 1Tivoli Storage Manager May 13, 2026 Feb 1, 2017 N/A· v4 7.0 HIGH· v3 4.4 MEDIUM· v2 Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforced.
CVE-2016-6042 1Ibm 1Security Appscan May 13, 2026 Feb 1, 2017 N/A· v4 7.3 HIGH· v3 9.3 HIGH· v2 IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacke...Show more IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to execute arbitrary code on the system in the same context as the victim.Show less
CVE-2016-6040 1Ibm 1Rational Collaborative Lifecycle Management May 13, 2026 Feb 1, 2017 N/A· v4 5.0 MEDIUM· v3 6.0 MEDIUM· v2 IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.

Previous 1...258259260...413 Next