Ibm
ibm
8,250 CVEs • 1,572 products
Products (1,572)
Click to collapseToggle
Products (1,572)
Click to collapse
CVEs (8,250)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
7Apple DebianGnu+4 more18Communications Application Session Controller Communications Eagle Application ProcessorCommunications Eagle Lnp Application Processor+15 moreMay 6, 2026 Jan 28, 2015 N/A· v4 N/A· v3 10.0 HIGH· v2 Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostb...Show more |
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTM...Show more |
Cross-site scripting (XSS) vulnerability in the Process Portal in IBM Business Process Manager 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.1, and 8.5.5 allows remote authenticated users to inject arbitrary web script or HTM...Show more |
IBM API Management 3.0 before 3.0.4.0 IF1 allows remote attackers to obtain sensitive analytics information in an encrypted form via unspecified vectors. |
1Ibm 1Security Network Protection Xgs Firmware May 6, 2026 Jan 17, 2015 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Security Network Protection 5.1.x and 5.2.x before 5.2.0.0 FP5 and 5.3.x before 5.3.0.0 FP1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. |
1Ibm 3Serverguide Toolscenter SuiteUpdatexpress System Packs InstallerMay 6, 2026 Jan 17, 2015 N/A· v4 N/A· v3 2.1 LOW· v2 IBM ServerGuide before 9.63, UpdateXpress System Packs Installer (UXSPI) before 9.63, and ToolsCenter Suite before 9.63 place credentials in logs, which allows local users to obtain sensitive information by reading a fil...Show more |
Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 before 7.4.0.3 allows remote authenticated users to inject arbitrary web script...Show more |
1Ibm 2Sas Connectivity Module Firmware Sas Raid Module FirmwareMay 6, 2026 Jan 17, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to obtain blade and storage-pool access via a TELNET session. |
1Ibm 2Sas Connectivity Module Firmware Sas Raid Module FirmwareMay 6, 2026 Jan 17, 2015 N/A· v4 N/A· v3 7.8 HIGH· v2 IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of service (reboot) via a flood of IP packets. |
lquerylv in cmdlvm in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x allows local users to gain privileges via a crafted DBGCMD_LQUERYLV environment-variable value. |
1Ibm 4Emptoris Emptoris Contract ManagementEmptoris Program Management+1 moreMay 6, 2026 Jan 10, 2015 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix...Show more |
1Ibm 2Sterling B2b Integrator Sterling File GatewayMay 6, 2026 Jan 10, 2015 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial of service (connection-slot exhaustion) via a crafted HTTP request. |
1Ibm 2Pureapplication System Workload DeployerMay 6, 2026 Jan 10, 2015 N/A· v4 N/A· v3 9.0 HIGH· v2 Multiple directory traversal vulnerabilities in the file-upload feature in IBM PureApplication System 1.0 before 1.0.0.4 iFix 10, 1.1 before 1.1.0.5, and 2.0 before 2.0.0.1 and Workload Deployer 3.1.0.7 before IF5 allow...Show more |
Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management before 6.0.5.5a allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. |
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS s...Show more |
1Ibm 1Websphere Service Registry And Repository May 6, 2026 Dec 29, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 IBM WebSphere Service Registry and Repository (WSRR) 8.5 before 8.5.0.1, when Chrome and WebSEAL are used, does not properly process ServiceRegistryDashboard logout actions, which allows remote attackers to bypass intend...Show more |
1Ibm 2Rational Appscan Source Security Appscan SourceMay 6, 2026 Dec 29, 2014 N/A· v4 N/A· v3 2.1 LOW· v2 IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive cred...Show more |
1Ibm 1Websphere Service Registry And Repository May 6, 2026 Dec 24, 2014 N/A· v4 N/A· v3 3.5 LOW· v2 Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authent...Show more |
1Ibm 1Websphere Service Registry And Repository May 6, 2026 Dec 24, 2014 N/A· v4 N/A· v3 6.0 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote a...Show more |
1Ibm 1Websphere Service Registry And Repository May 6, 2026 Dec 24, 2014 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrict...Show more |