Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-5939 1Ibm 1Kenexa Lms On Cloud May 13, 2026 Feb 1, 2017 N/A· v4 6.3 MEDIUM· v3 6.5 MEDIUM· v2 IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database.
CVE-2016-5937 1Ibm 1Kenexa Lcms Premier May 13, 2026 Feb 1, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2016-5899 1Ibm 1Jazz Reporting Service May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-5898 1Ibm 1Jazz Reporting Service May 13, 2026 Feb 1, 2017 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to o...Show more IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization. By sending a direct request, an attacker could exploit this vulnerability to obtain sensitive information.Show less
CVE-2016-5897 1Ibm 1Jazz Reporting Service May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the ho...Show more IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.Show less
CVE-2016-5896 1Ibm 6Maximo Asset Management Maximo For AviationMaximo For Life Sciences+3 more May 13, 2026 Feb 1, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.
CVE-2016-5884 1Ibm 2Domino Inotes May 13, 2026 Feb 1, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi...Show more IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-5882 1Ibm 2Domino Inotes May 13, 2026 Feb 1, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi...Show more IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-5880 1Ibm 2Domino Inotes May 13, 2026 Feb 1, 2017 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure wi...Show more IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2016-3053 1Ibm 1Aix May 13, 2026 Feb 1, 2017 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges.
CVE-2016-3046 1Ibm 3Security Access Manager 9.0 Firmware Security Access Manager For MobileSecurity Access Manager For Web 8.0 Firmware May 13, 2026 Feb 1, 2017 N/A· v4 2.7 LOW· v3 4.0 MEDIUM· v2 IBM Security Access Manager for Web is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements which could allow the attacker to view information in the back-end database.
CVE-2016-3045 1Ibm 3Security Access Manager Security Access Manager For MobileSecurity Access Manager For Web May 13, 2026 Feb 1, 2017 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser histo...Show more IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.Show less
CVE-2016-3043 1Ibm 4Security Access Manager 9.0 Firmware Security Access Manager For MobileSecurity Access Manager For Web 7.0 Firmware+1 more May 13, 2026 Feb 1, 2017 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to...Show more IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.Show less
CVE-2016-3035 1Ibm 1Security Appscan Source May 13, 2026 Feb 1, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.
CVE-2016-3034 1Ibm 1Security Appscan Source May 13, 2026 Feb 1, 2017 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.
CVE-2016-3029 1Ibm 3Security Access Manager 9.0 Firmware Security Access Manager For Mobile 8.0 FirmwareSecurity Access Manager For Web 8.0 Firmware May 13, 2026 Feb 1, 2017 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2016-3027 1Ibm 3Security Access Manager 9.0 Firmware Security Access Manager For Mobile 8.0 FirmwareSecurity Access Manager For Web 8.0 Firmware May 13, 2026 Feb 1, 2017 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose high...Show more IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.Show less
CVE-2016-3024 1Ibm 3Security Access Manager 9.0 Firmware Security Access Manager For Mobile 8.0 FirmwareSecurity Access Manager For Web 8.0 Firmware May 13, 2026 Feb 1, 2017 N/A· v4 4.0 MEDIUM· v3 2.1 LOW· v2 IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system.
CVE-2016-3023 1Ibm 4Security Access Manager 9.0 Firmware Security Access Manager For Mobile 8.0 FirmwareSecurity Access Manager For Web 7.0 Firmware+1 more May 13, 2026 Feb 1, 2017 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names.
CVE-2016-3022 1Ibm 4Security Access Manager 9.0 Firmware Security Access Manager For Mobile 8.0 FirmwareSecurity Access Manager For Web 7.0 Firmware+1 more May 13, 2026 Feb 1, 2017 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions.

Previous 1...260261262...413 Next