← Back

Ibm

ibm

8,252 CVEs • 1,572 products

Products (1,572)

Click to collapse
Toggle
Websphere Application Server
websphere_application_server
465 CVEs
Aix
aix
400 CVEs
Db2
db2
339 CVEs
Rational Quality Manager
rational_quality_manager
202 CVEs
Sterling B2b Integrator
sterling_b2b_integrator
195 CVEs
Qradar Security Information And Event Manager
qradar_security_information_and_event_manager
190 CVEs
Infosphere Information Server
infosphere_information_server
189 CVEs
Maximo Asset Management
maximo_asset_management
182 CVEs
Rational Doors Next Generation
rational_doors_next_generation
153 CVEs
Rational Team Concert
rational_team_concert
142 CVEs
Rational Collaborative Lifecycle Management
rational_collaborative_lifecycle_management
141 CVEs
Rational Engineering Lifecycle Manager
rational_engineering_lifecycle_manager
141 CVEs
Websphere Portal
websphere_portal
126 CVEs
Security Guardium
security_guardium
112 CVEs
Cognos Analytics
cognos_analytics
104 CVEs
Sterling File Gateway
sterling_file_gateway
93 CVEs
Vios
vios
92 CVEs
Security Verify Access
security_verify_access
92 CVEs
Rational Rhapsody Design Manager
rational_rhapsody_design_manager
90 CVEs
Websphere Mq
websphere_mq
89 CVEs
Business Process Manager
business_process_manager
88 CVEs
Lotus Domino
lotus_domino
86 CVEs
Rational Software Architect Design Manager
rational_software_architect_design_manager
81 CVEs
Api Connect
api_connect
81 CVEs
Lotus Notes
lotus_notes
71 CVEs
Security Key Lifecycle Manager
security_key_lifecycle_manager
70 CVEs
Db2 Universal Database
db2_universal_database
66 CVEs
Smartcloud Control Desk
smartcloud_control_desk
65 CVEs
Urbancode Deploy
urbancode_deploy
65 CVEs
Concert
concert
65 CVEs
I
i
64 CVEs
Spectrum Scale
spectrum_scale
57 CVEs
Jazz Reporting Service
jazz_reporting_service
55 CVEs
Business Automation Workflow
business_automation_workflow
53 CVEs
Cloud Pak For Security
cloud_pak_for_security
53 CVEs
Cognos Controller
cognos_controller
52 CVEs
Maximo Asset Management Essentials
maximo_asset_management_essentials
51 CVEs
Informix Dynamic Server
informix_dynamic_server
50 CVEs
Tivoli Storage Manager
tivoli_storage_manager
49 CVEs
Tivoli Storage Manager Fastback
tivoli_storage_manager_fastback
48 CVEs
Security Access Manager
security_access_manager
48 CVEs
Mq Appliance
mq_appliance
48 CVEs
Mq
mq
48 CVEs
Engineering Workflow Management
engineering_workflow_management
48 CVEs
Engineering Lifecycle Management
engineering_lifecycle_management
48 CVEs
Tririga Application Platform
tririga_application_platform
47 CVEs
Maximo For Oil And Gas
maximo_for_oil_and_gas
47 CVEs
Tivoli Directory Server
tivoli_directory_server
46 CVEs
Sametime
sametime
46 CVEs
Maximo For Life Sciences
maximo_for_life_sciences
46 CVEs
Maximo For Nuclear Power
maximo_for_nuclear_power
46 CVEs
Maximo For Transportation
maximo_for_transportation
46 CVEs
Financial Transaction Manager
financial_transaction_manager
46 CVEs
Curam Social Program Management
curam_social_program_management
46 CVEs
Robotic Process Automation
robotic_process_automation
46 CVEs
Aspera Faspex
aspera_faspex
46 CVEs
Cics Tx
cics_tx
46 CVEs
Tivoli Asset Management For It
tivoli_asset_management_for_it
45 CVEs
Connections
connections
45 CVEs
Maximo For Utilities
maximo_for_utilities
45 CVEs
Engineering Test Management
engineering_test_management
45 CVEs
Bigfix Platform
bigfix_platform
44 CVEs
Spectrum Protect Plus
spectrum_protect_plus
44 CVEs
Websphere Commerce
websphere_commerce
43 CVEs
Security Identity Manager
security_identity_manager
43 CVEs
Rational Clearquest
rational_clearquest
42 CVEs
Tivoli Service Request Manager
tivoli_service_request_manager
41 CVEs
Change And Configuration Management Database
change_and_configuration_management_database
40 CVEs
Content Navigator
content_navigator
40 CVEs
Datapower Gateway
datapower_gateway
40 CVEs
Security Identity Governance And Intelligence
security_identity_governance_and_intelligence
39 CVEs
Rational Requirements Composer
rational_requirements_composer
38 CVEs
Cloud Pak System
cloud_pak_system
36 CVEs
Maximo Application Suite
maximo_application_suite
32 CVEs
Sterling Secure Proxy
sterling_secure_proxy
31 CVEs
Planning Analytics Local
planning_analytics_local
30 CVEs
Planning Analytics
planning_analytics
30 CVEs
Cognos Business Intelligence
cognos_business_intelligence
29 CVEs
Tivoli Monitoring
tivoli_monitoring
29 CVEs
Maximo For Government
maximo_for_government
29 CVEs
Infosphere Information Server On Cloud
infosphere_information_server_on_cloud
29 CVEs
I2 Analysts Notebook
i2_analysts_notebook
29 CVEs
Collaborative Lifecycle Management
collaborative_lifecycle_management
29 CVEs
Guardium Data Encryption
guardium_data_encryption
29 CVEs
Engineering Requirements Quality Assistant On Premises
engineering_requirements_quality_assistant_on-premises
29 CVEs
Security Guardium Key Lifecycle Manager
security_guardium_key_lifecycle_manager
29 CVEs
Maximo Service Desk
maximo_service_desk
28 CVEs
Engineering Lifecycle Optimization Publishing
engineering_lifecycle_optimization_-_publishing
28 CVEs
Jazz For Service Management
jazz_for_service_management
28 CVEs
Robotic Process Automation For Cloud Pak
robotic_process_automation_for_cloud_pak
28 CVEs
Security Verify Governance
security_verify_governance
28 CVEs
Java
java
27 CVEs
Security Appscan
security_appscan
27 CVEs
Security Access Manager For Web 8.0 Firmware
security_access_manager_for_web_8.0_firmware
27 CVEs
Security Access Manager For Mobile
security_access_manager_for_mobile
27 CVEs
Domino
domino
27 CVEs
Doors Next
doors_next
26 CVEs
Lotus Notes Traveler
lotus_notes_traveler
25 CVEs
Security Access Manager 9.0 Firmware
security_access_manager_9.0_firmware
25 CVEs
Security Secret Server
security_secret_server
25 CVEs

CVEs (8,252)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-3006
1Ibm
1Connections
May 6, 2026
Sep 26, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded s...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3003.Show less
CVE-2016-3003
1Ibm
1Connections
May 6, 2026
Sep 26, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded s...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3001 and CVE-2016-3006.Show less
CVE-2016-3001
1Ibm
1Connections
May 6, 2026
Sep 26, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded s...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via an embedded string, a different vulnerability than CVE-2016-3003 and CVE-2016-3006.Show less
CVE-2016-3000
1Ibm
1Connections
May 6, 2026
Sep 26, 2016
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL.
CVE-2016-2999
1Ibm
1Connections
May 6, 2026
Sep 26, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack.
CVE-2016-0379
1Ibm
1Websphere Mq
May 6, 2026
Sep 26, 2016
N/A· v4
3.1 LOW· v3
3.5 LOW· v2
IBM WebSphere MQ 7.5 before 7.5.0.7 and 8.0 before 8.0.0.5 mishandles protocol flows, which allows remote authenticated users to cause a denial of service (channel outage) by leveraging queue-manager rights.
CVE-2016-0248
1Ibm
1Security Guardium
May 6, 2026
Sep 26, 2016
N/A· v4
3.7 LOW· v3
4.3 MEDIUM· v2
IBM Security Guardium 9.0 before p700 and 10.0 before p100 allows man-in-the-middle attackers to obtain sensitive query-string information from SSL sessions via unspecified vectors.
CVE-2016-5954
1Ibm
1Websphere Portal
May 6, 2026
Sep 12, 2016
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by...Show more
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF30, 8.0.0 through 8.0.0.1 CF21, and 8.5.0 before CF12 allows remote authenticated users to cause a denial of service by uploading temporary files.Show less
CVE-2016-5927
1Ibm
1Tivoli Storage Manager For Space Management
May 6, 2026
Sep 12, 2016
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local us...Show more
IBM Tivoli Storage Manager for Space Management (aka Spectrum Protect for Space Management) 6.3.x before 6.3.2.6, 6.4.x before 6.4.3.3, and 7.1.x before 7.1.6, when certain dsmsetpw tracing is configured, allows local users to discover an encrypted password by reading application-trace output.Show less
CVE-2016-0331
1Ibm
2Rational Collaborative Lifecycle Management
Rational Team Concert
May 6, 2026
Sep 12, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated user...Show more
Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert 6.0.1 and 6.0.2 before 6.0.2 iFix2 and Rational Collaborative Lifecycle Management 6.0.1 and 6.0.2 before 6.0.2 iFix2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.Show less
CVE-2016-5879
1Ibm
1Mq Appliance Firmware
May 6, 2026
Sep 2, 2016
N/A· v4
8.8 HIGH· v3
4.6 MEDIUM· v2
MQCLI on IBM MQ Appliance M2000 and M2001 devices allows local users to execute arbitrary shell commands via a crafted (1) Disaster Recovery or (2) High Availability command.
CVE-2016-3010
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3005.Show less
CVE-2016-3008
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vu...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-2956.Show less
CVE-2016-3005
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-2997, and CVE-2016-3010.Show less
CVE-2016-2998
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
3.5 LOW· v3
3.5 LOW· v2
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users fo...Show more
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that update data.Show less
CVE-2016-2997
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2995, CVE-2016-3005, and CVE-2016-3010.Show less
CVE-2016-2995
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2997, CVE-2016-3005, and CVE-2016-3010.Show less
CVE-2016-2956
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vu...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2954 and CVE-2016-3008.Show less
CVE-2016-2954
1Ibm
1Connections
May 6, 2026
Sep 1, 2016
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vu...Show more
Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 5.0 before CR4 and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-2956 and CVE-2016-3008.Show less
CVE-2016-0385
1Ibm
1Websphere Application Server
May 6, 2026
Sep 1, 2016
N/A· v4
3.1 LOW· v3
3.5 LOW· v2
Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote...Show more
Buffer overflow in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.10, 9.0 before 9.0.0.1, and Liberty before 16.0.0.3, when HttpSessionIdReuse is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.Show less