Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-5431 1Ibm 2Tivoli Federated Identity Manager Tivoli Federated Identity Manager Business Gateway Apr 29, 2026 Nov 1, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 befor...Show more Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.Show less
CVE-2013-5430 1Ibm 1Security Appscan Apr 29, 2026 Oct 28, 2013 N/A· v4 N/A· v3 5.5 MEDIUM· v2 The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by...Show more The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.Show less
CVE-2013-5424 1Ibm 1Flex System Manager Apr 29, 2026 Oct 25, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.
CVE-2013-3989 1Ibm 1Security Appscan Apr 29, 2026 Oct 25, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-th...Show more IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.Show less
CVE-2013-5389 1Ibm 1Lotus Domino Apr 29, 2026 Oct 22, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.
CVE-2013-5388 1Ibm 1Lotus Domino Apr 29, 2026 Oct 22, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F.
CVE-2013-5446 1Ibm 2Websphere Datapower Xc10 Appliance Websphere Datapower Xc10 Appliance Firmware Apr 29, 2026 Oct 22, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.
CVE-2013-5428 1Ibm 2Websphere Datapower Xc10 Appliance Websphere Datapower Xc10 Appliance Firmware Apr 29, 2026 Oct 22, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2013-5372 1Ibm 1Websphere Message Broker Apr 29, 2026 Oct 19, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory con...Show more The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.Show less
CVE-2013-5376 1Ibm 2Storwize V7000 Unified Storwize V7000 Unified Software Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross...Show more Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.Show less
CVE-2013-3025 1Ibm 1Rational Focal Point Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-0500 1Ibm 2Storwize V7000 Unified Storwize V7000 Unified Software Apr 29, 2026 Oct 17, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obta...Show more IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or cause a denial of service (device crash) via a (1) CIFS, (2) HTTPS, (3) SCP, or (4) SFTP operation.Show less
CVE-2013-5394 1Ibm 1Websphere Extreme Scale Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.
CVE-2013-5393 1Ibm 1Websphere Extreme Scale Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.
CVE-2013-5390 1Ibm 1Websphere Extreme Scale Apr 29, 2026 Oct 16, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified ve...Show more Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-4804 1Ibm 1Business Process Monitor Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors.
CVE-2013-4056 1Ibm 1Infosphere Information Server Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hija...Show more Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.Show less
CVE-2013-2366 1Ibm 1Business Process Monitor Apr 29, 2026 Oct 13, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802.
CVE-2013-0580 1Ibm 1Infosphere Optim Data Growth For Oracle E Business Suite Apr 29, 2026 Oct 10, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of ar...Show more Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the authentication of arbitrary users.Show less
CVE-2013-0579 1Ibm 1Infosphere Optim Data Growth For Oracle E Business Suite Apr 29, 2026 Oct 10, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (...Show more The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's web browser either (1) before or (2) after authentication.Show less

Previous 1...324325326...413 Next