Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-7451 1Ibm 9Maximo Asset Management Maximo Asset Management EssentialsMaximo For Government+6 more May 6, 2026 Jan 2, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartClo...Show more Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2 and 7.6 before 7.6.0.3 FP3 and Maximo Asset Management 7.5 before 7.5.0.9 IF2, 7.5.1, and 7.6 before 7.6.0.3 FP3 for SmartCloud Control Desk allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.Show less
CVE-2015-7442 1Ibm 2Installation Manager Packaging Utility May 6, 2026 Jan 2, 2016 N/A· v4 7.0 HIGH· v3 6.2 MEDIUM· v2 consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is locate...Show more consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 and 1.8.x before 1.8.4 allows local users to gain privileges via a Trojan horse program that is located in /tmp with a name based on a predicted PID value.Show less
CVE-2015-7429 1Ibm 2Spectrum Protect For Virtual Environments Spectrum Protect Snapshot May 6, 2026 Jan 2, 2016 N/A· v4 8.5 HIGH· v3 4.0 MEDIUM· v2 The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.4 and Tivoli Storage Flash...Show more The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.4 and Tivoli Storage FlashCopy Manager for VMware (aka Spectrum Protect Snapshot) 4.1 before 4.1.4 allows remote authenticated users to restore arbitrary virtual machines and consequently obtain sensitive information by visiting the vSphere inventory.Show less
CVE-2015-7402 1Ibm 1Curam Social Program Management May 6, 2026 Jan 2, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-5020 1Ibm 1Infosphere Biginsights May 6, 2026 Jan 2, 2016 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to bypass intended access restrictions and truncate arbitrary tables via unspecified vectors.
CVE-2015-5018 1Ibm 3Security Access Manager 9.0 Firmware Security Access Manager For Web 7.0 FirmwareSecurity Access Manager For Web 8.0 Firmware May 6, 2026 Jan 2, 2016 N/A· v4 8.0 HIGH· v3 8.5 HIGH· v2 IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local...Show more IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.Show less
CVE-2015-4996 1Ibm 1Rational Clearquest May 6, 2026 Jan 2, 2016 N/A· v4 5.1 MEDIUM· v3 3.6 LOW· v2 IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover credentials via unspecified vectors.
CVE-2015-4990 1Ibm 1Tealeaf Customer Experience May 6, 2026 Jan 2, 2016 N/A· v4 4.0 MEDIUM· v3 1.9 LOW· v2 The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local...Show more The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows local users to discover credentials by leveraging privileges during an unspecified connection type.Show less
CVE-2015-4989 1Ibm 1Tealeaf Customer Experience May 6, 2026 Jan 2, 2016 N/A· v4 3.7 LOW· v3 5.0 MEDIUM· v2 The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remot...Show more The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.Show less
CVE-2015-7456 1Ibm 1Spectrum Scale May 6, 2026 Jan 1, 2016 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified vectors.
CVE-2015-7409 1Ibm 1Qradar Security Information And Event Manager May 6, 2026 Jan 1, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web script or HTML via an unspecified field.
CVE-2015-7445 1Ibm 2B2b Advanced Communications Multi Enterprise Integration Gateway May 6, 2026 Jan 1, 2016 N/A· v4 4.3 MEDIUM· v3 3.5 LOW· v2 IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by readin...Show more IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when guest access is configured, allow remote authenticated users to obtain sensitive information by reading error messages in responses.Show less
CVE-2015-7421 1Ibm 1Mq Appliance M2000 May 6, 2026 Jan 1, 2016 N/A· v4 3.7 LOW· v3 5.0 MEDIUM· v2 Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7420.
CVE-2015-7420 1Ibm 1Mq Appliance M2000 May 6, 2026 Jan 1, 2016 N/A· v4 3.7 LOW· v3 5.0 MEDIUM· v2 Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive information via unknown vectors, a different vulnerability than CVE-2015-7421.
CVE-2015-7415 1Ibm 1Urbancode Deploy May 6, 2026 Jan 1, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a cr...Show more Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted URL.Show less
CVE-2015-7410 1Ibm 1Sterling B2b Integrator May 6, 2026 Jan 1, 2016 N/A· v4 7.4 HIGH· v3 5.8 MEDIUM· v2 The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspe...Show more The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-middle attackers to obtain sensitive information or modify data via unspecified vectors.Show less
CVE-2015-5049 1Ibm 1Openpages Grc Platform May 6, 2026 Jan 1, 2016 N/A· v4 5.4 MEDIUM· v3 6.5 MEDIUM· v2 SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2015-4943 1Ibm 1Websphere Mq Light May 6, 2026 Jan 1, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconnect actions, a different vulnerability than CVE-2015-4942.
CVE-2015-4941 1Ibm 1Websphere Mq Light May 6, 2026 Jan 1, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR service crash) via unspecified vectors.
CVE-2015-7489 1Ibm 1Spss Statistics May 6, 2026 Jan 1, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users to gain privileges by modifying a script.

Previous 1...280281282...413 Next