Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-14915 1Ibm 1Websphere Application Server Jun 17, 2026 Mar 25, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation. A privileged user could gain additional access to the application server.
CVE-2025-14912 1Ibm 1Infosphere Information Server Jun 17, 2026 Mar 25, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading...Show more IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.Show less
CVE-2025-14810 1Ibm 1Infosphere Information Server Jun 17, 2026 Mar 25, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an authenticated user to retain access to sensitive information. CVSS:3.1/AV...Show more IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an authenticated user to retain access to sensitive information. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CWE: CWE-613: Insufficient Session Expiration CVSS Source: IBM CVSS Base score: 6.3 CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)Show less
CVE-2025-14808 1Ibm 1Infosphere Information Server Jun 17, 2026 Mar 25, 2026 N/A· v4 3.1 LOW· v3 N/A· v2 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in th...Show more IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information from the query string of an HTTP GET method to process a request which could be obtained using man in the middle techniques.Show less
CVE-2025-14807 1Ibm 1Infosphere Information Server Jun 17, 2026 Mar 25, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks agai...Show more IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking.Show less
CVE-2025-14790 1Ibm 1Infosphere Information Server Jun 17, 2026 Mar 25, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an attacker to obtain sensitive information due to insufficiently protected credentials.
CVE-2025-12708 1Ibm 1Concert Jun 17, 2026 Mar 25, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user.
CVE-2026-1276 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Mar 19, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended fun...Show more IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36051 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Mar 19, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.
CVE-2025-15051 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Mar 19, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality.
CVE-2025-13995 1Ibm 1Qradar Security Information And Event Manager Jun 17, 2026 Mar 19, 2026 N/A· v4 5.0 MEDIUM· v3 N/A· v2 IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.
CVE-2026-3856 1Ibm 1Db2 Recovery Expert Jun 17, 2026 Mar 17, 2026 N/A· v4 9.1 CRITICAL· v3 N/A· v2 IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 could allow an attacker to modify or corrupt data due to an insecure mechanism used for verifying the integrity of the data during transmission.
CVE-2026-1264 1Ibm 2Sterling B2b Integrator Sterling File Gateway Jun 17, 2026 Mar 17, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partn...Show more IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote unauthenticated attacker to view and delete the partners of a community and to delete the communities.Show less
CVE-2025-14031 1Ibm 2Sterling B2b Integrator Sterling File Gateway Jun 17, 2026 Mar 17, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially craft...Show more IBM Sterling B2B Integrator and and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 could allow an unauthenticated attacker to send a specially crafted request that causes the application to crash.Show less
CVE-2026-1376 1Ibm 1I Jun 17, 2026 Mar 17, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM i 7.6 could allow a remote attacker to cause a denial of service using failed authentication connections due to improper allocation of resources.
CVE-2026-1267 1Ibm 1Planning Analytics Local Jun 17, 2026 Mar 17, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of proper access controls.
CVE-2025-14806 1Ibm 1Planning Analytics Local Jun 17, 2026 Mar 17, 2026 N/A· v4 5.7 MEDIUM· v3 N/A· v2 IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an attacker to trick the caching mechanism into storing and serving sensitive, user-specific responses as publicly cacheable resources.
CVE-2026-0977 1Ibm 1Cics Transaction Gateway Jun 17, 2026 Mar 16, 2026 N/A· v4 7.1 HIGH· v3 N/A· v2 IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.
CVE-2025-13460 1Ibm 1Aspera Console Jun 17, 2026 Mar 16, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM Aspera Console 3.3.0 through 3.4.8 could allow an attacker to enumerate usernames due to an observable response discrepancy.
CVE-2025-13459 1Ibm 1Aspera Console Jun 17, 2026 Mar 16, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM Aspera Console 3.3.0 through 3.4.8 could allow a privileged user to cause a denial of service due to improper enforcement of behavioral workflow.

Previous 1...313233...436 Next