Ibm
ibm
8,704 CVEs • 1,613 products
Products (1,613)
Click to collapseToggle
Products (1,613)
Click to collapse
CVEs (8,704)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Ibm 1Security Directory Integrator Jun 17, 2026 May 27, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM SDI 7.2.0.0 through 7.2.0.14 and IBM Security Directory Integrator 10.0.0.0 through 10.0.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the br...Show more |
1Ibm 1Engineering Lifecycle Management Jul 24, 2026 May 26, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an attacker with administrative privileges to execute remote code due to exposed method that is not properly restricted. |
1Ibm 1Engineering Lifecycle Management Jul 24, 2026 May 26, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Engineering Lifecycle Management 7.0.3, 7.1.0, and 7.2.0 could allow an unauthenticated remote attacker to update server property files that would allow them to gain unauthorized access to the application. |
1Ibm 1Engineering Lifecycle Management Jul 24, 2026 May 26, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 is vulnerable to an XML external entity injection...Show more |
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service and a potential remote code execution due to improper input validation. |
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configuration. |
IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication). |
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache. |
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial...Show more |
IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to execute remote code or cause a denial of service. |
1Ibm 1Websphere Application Server Jul 23, 2026 May 26, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server...Show more |
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to HTTP request smuggling in the Web Server...Show more |
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module. |
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload. |
1Ibm 1Cloud Pak For Data System Cyclops Jul 24, 2026 May 26, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from the manufacturing process for use during the installation process, whi...Show more |
1Ibm 1Cloud Pak For Data System Cyclops Jul 24, 2026 May 26, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the...Show more |
1Ibm 1Financial Transaction Manager For Multiplatform Jul 24, 2026 May 26, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated...Show more |
IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions. |
1Ibm 2Cognos Analytics Cognos TransformerJul 24, 2026 May 26, 2026 N/A· v4 7.6 HIGH· v3 N/A· v2 IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration. This vulnerability allows a privileged user to...Show more |
1Ibm 1Webmethods Integration Server Jul 24, 2026 May 26, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vulnerable to server-side request forgery (SSRF). This may allow an authe...Show more |