Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-3972 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.
CVE-2013-3971 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049.
CVE-2013-3049 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3971.
CVE-2013-3048 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspeci...Show more Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-3047 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors.
CVE-2013-0451 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 6.5 MEDIUM· v2 SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
CVE-2012-3323 1Ibm 1Maximo Asset Management Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 IBM Maximo Asset Management 6.2 before 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.3 allows remote attackers to gain privileges via unspecified vectors.
CVE-2013-5370 1Ibm 1Spss Collaboration And Deployment Services Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042.
CVE-2013-4042 1Ibm 1Spss Collaboration And Deployment Services Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370.
CVE-2013-3041 1Ibm 1Rational Clearquest Apr 29, 2026 Oct 1, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vecto...Show more The Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to obtain sensitive information from the client-server data stream via unspecified vectors associated with a "JSON hijacking attack."Show less
CVE-2013-0598 1Ibm 1Rational Clearquest Apr 29, 2026 Sep 28, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbit...Show more Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the authentication of arbitrary users.Show less
CVE-2013-5403 1Ibm 1Websphere Datapower Xc10 Appliance Firmware Apr 29, 2026 Sep 27, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors.
CVE-2013-5373 1Ibm 1Rational Clearcase Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 6.9 MEDIUM· v2 The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands.
CVE-2013-4025 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 1.9 LOW· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the l...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.Show less
CVE-2013-4024 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allow...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.Show less
CVE-2013-4022 1Ibm 4Data Studio Web Console Db2 Recovery ExpertInfosphere Optim Configuration Manager+1 more Apr 29, 2026 Sep 25, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a c...Show more IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.Show less
CVE-2013-4053 1Ibm 2Websphere Application Server Websphere Application Server Feature Pack For Web Services Apr 29, 2026 Sep 20, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, wh...Show more The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.Show less
CVE-2013-4052 1Ibm 1Websphere Application Server Apr 29, 2026 Sep 20, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote att...Show more Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2013-0596 1Ibm 1Websphere Application Server Apr 29, 2026 Sep 20, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2013-4068 1Ibm 2Lotus Domino Lotus Inotes Apr 29, 2026 Sep 20, 2013 N/A· v4 N/A· v3 7.1 HIGH· v2 Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8.

Previous 1...326327328...413 Next