Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2013-5369 1Ibm 1Spss Analytical Decision Management Apr 29, 2026 Sep 16, 2013 N/A· v4 N/A· v3 9.3 HIGH· v2 IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service.
CVE-2013-4049 1Ibm 1Spss Analytical Decision Management Apr 29, 2026 Sep 16, 2013 N/A· v4 N/A· v3 8.5 HIGH· v2 Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and access...Show more Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file.Show less
CVE-2013-4048 1Ibm 1Spss Analytical Decision Management Apr 29, 2026 Sep 16, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vect...Show more Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page.Show less
CVE-2013-4047 1Ibm 1Spss Analytical Decision Management Apr 29, 2026 Sep 16, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link...Show more Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link.Show less
CVE-2013-3039 1Ibm 1Rational Requirements Composer Apr 29, 2026 Sep 12, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 IBM Rational Requirements Composer before 4.0.4 does not properly perform authentication, which has unspecified impact and remote attack vectors.
CVE-2013-3038 1Ibm 1Rational Requirements Composer Apr 29, 2026 Sep 12, 2013 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for remote attackers to discover credentials via unknown vectors.
CVE-2013-3037 1Ibm 1Rational Requirements Composer Apr 29, 2026 Sep 12, 2013 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Unspecified vulnerability in IBM Rational Requirements Composer before 4.0.4 makes it easier for local users to gain privileges via unknown vectors.
CVE-2013-3036 1Ibm 1Rational Requirements Composer Apr 29, 2026 Sep 12, 2013 N/A· v4 N/A· v3 4.9 MEDIUM· v2 Open redirect vulnerability in IBM Rational Requirements Composer before 4.0.4 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
CVE-2013-2992 1Ibm 1Websphere Commerce Apr 29, 2026 Sep 9, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The Search component in IBM WebSphere Commerce 7.0 FP4 through FP6, in certain search-term association configurations, allows remote attackers to cause a denial of service via a crafted query.
CVE-2013-4062 1Ibm 1Rational Policy Tester Apr 29, 2026 Sep 9, 2013 N/A· v4 N/A· v3 6.8 MEDIUM· v2 IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-...Show more IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-server data stream via a crafted certificate.Show less
CVE-2013-4061 1Ibm 1Rational Policy Tester Apr 29, 2026 Sep 9, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP re...Show more IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.Show less
CVE-2013-3031 1Ibm 1Soliddb Apr 29, 2026 Sep 9, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of...Show more A SQL stored procedure in the Universal Cache component in IBM solidDB 6.0.x before 6.0.1070, 6.3.x before 6.3.0.56, 6.5.x before 6.5.0.12, and 7.0.x before 7.0.0.4 allows remote authenticated users to cause a denial of service (uninitialized-memory access and daemon crash) via a call that includes named arguments and default parameter values, but does not include all of the expected arguments.Show less
CVE-2013-2997 1Ibm 1Security Appscan Apr 29, 2026 Sep 8, 2013 N/A· v4 N/A· v3 1.7 LOW· v2 IBM Security AppScan Enterprise before 8.7 does not invalidate the session context upon a logout action, which allows remote attackers to hijack sessions by leveraging an unattended workstation.
CVE-2013-0531 1Ibm 1Security Appscan Apr 29, 2026 Sep 8, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the n...Show more The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.Show less
CVE-2013-4003 1Ibm 1Tririga Application Platform Apr 29, 2026 Aug 29, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input...Show more Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/default/actionHandler/queryHandler.jsp, or (3) unspecified input in a portalSectionId action to html/en/default/reportTemplate/hGridTopQuery.jsp.Show less
CVE-2013-4039 1Ibm 1Websphere Extended Deployment Compute Grid Apr 29, 2026 Aug 28, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors.
CVE-2013-4033 1Ibm 2Db2 Db2 Connect Apr 29, 2026 Aug 28, 2013 N/A· v4 N/A· v3 4.6 MEDIUM· v2 IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.
CVE-2013-2988 1Ibm 1Cognos Business Intelligence Apr 29, 2026 Aug 27, 2013 N/A· v4 N/A· v3 2.6 LOW· v2 Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege...Show more Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2978.Show less
CVE-2013-2978 1Ibm 1Cognos Business Intelligence Apr 29, 2026 Aug 27, 2013 N/A· v4 N/A· v3 2.1 LOW· v2 Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege...Show more Absolute path traversal vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to read files by leveraging the Report Author privilege, a different vulnerability than CVE-2013-2988.Show less
CVE-2013-0595 1Ibm 2Lotus Domino Lotus Inotes Apr 29, 2026 Aug 27, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN95XNR3.

Previous 1...327328329...413 Next