Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-3014 1Ibm 7Rational Collaborative Lifecycle Management Rational Doors Next GenerationRational Engineering Lifecycle Manager+4 more May 6, 2026 Nov 30, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix1...Show more Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Team Concert 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational DOORS Next Generation 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2016-3009 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 3.5 LOW· v3 3.5 LOW· v2 Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...Show more Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the Connections generic page.Show less
CVE-2016-3004 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 4.6 MEDIUM· v3 4.9 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that...Show more Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the set of available applications.Show less
CVE-2016-3002 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 2.1 LOW· v3 2.1 LOW· v2 IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device.
CVE-2016-2963 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.
CVE-2016-2958 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response.
CVE-2016-2957 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading a stack trace in a response.
CVE-2016-2953 1Ibm 1Connections May 6, 2026 Nov 30, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 does not require SSL, which allows remote attackers to obtain sensitive cleartext information by sniffing the network.
CVE-2016-2952 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 does not enable the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information by leveraging use of HTTP.
CVE-2016-2951 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performin...Show more IBM BigFix Remote Control before 9.1.3 does not properly set the default encryption strength, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and performing calculations on encrypted data.Show less
CVE-2016-2950 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2016-2949 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by reading cached web pages from a different user's session.
CVE-2016-2948 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 allows local users to discover hardcoded credentials via unspecified vectors.
CVE-2016-2944 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 does not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
CVE-2016-2943 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 1.9 LOW· v3 1.9 LOW· v2 IBM BigFix Remote Control before 9.1.3 allows local users to obtain sensitive information by leveraging unspecified privileges to read a log file.
CVE-2016-2940 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Multiple unspecified vulnerabilities in IBM BigFix Remote Control before 9.1.3 allow remote attackers to obtain sensitive information via unknown vectors.
CVE-2016-2937 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 6.5 MEDIUM· v3 6.4 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 allows remote attackers to obtain sensitive information or spoof e-mail transmission via a crafted POST request, related to an "untrusted information vulnerability."
CVE-2016-2936 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 7.3 HIGH· v3 5.0 MEDIUM· v2 IBM BigFix Remote Control before 9.1.3 uses cleartext storage for unspecified passwords, which allows local users to obtain sensitive information via unknown vectors.
CVE-2016-2935 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The broker application in IBM BigFix Remote Control before 9.1.3 allows remote attackers to cause a denial of service via an invalid HTTP request.
CVE-2016-2934 1Ibm 1Bigfix Remote Control May 6, 2026 Nov 30, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Previous 1...263264265...413 Next