Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-1386 1Ibm 2Tivoli Federated Identity Manager Tivoli Federated Identity Manager Business Gateway Apr 29, 2026 Jan 4, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which all...Show more IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.Show less
CVE-2011-1384 1Ibm 1Invscout.rte Apr 29, 2026 Jan 4, 2012 N/A· v4 N/A· v3 4.0 MEDIUM· v2 The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout ope...Show more The (1) bin/invscoutClient_VPD_Survey and (2) sbin/invscout_lsvpd programs in invscout.rte before 2.2.0.19 on IBM AIX 7.1, 6.1, 5.3, and earlier allow local users to delete arbitrary files, or trigger inventory scout operations on arbitrary files, via a symlink attack on an unspecified file.Show less
CVE-2011-5048 1Ibm 1Web Experience Factory Apr 29, 2026 Jan 3, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a (1) text I...Show more Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a (1) text INPUT element or (2) TEXTAREA element, related to an interaction between Smart Refresh and Dojo.Show less
CVE-2011-1393 1Ibm 1Lotus Domino Apr 29, 2026 Dec 27, 2011 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.
CVE-2011-4708 1Ibm 1Rational Asset Manager Apr 29, 2026 Dec 8, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Rational Asset Manager before 7.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2011-4668 1Ibm 1Tivoli Netcool/reporter Apr 29, 2026 Dec 2, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.
CVE-2011-1372 1Ibm 4Ts3100 Tape Library Ts3100 Tape Library FirmwareTs3200 Tape Library+1 more Apr 29, 2026 Nov 28, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obtain administrative access via unspecified vectors.
CVE-2011-1378 1Ibm 1Websphere Mq Apr 29, 2026 Nov 26, 2011 N/A· v4 N/A· v3 1.9 LOW· v2 IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command...Show more IBM WebSphere MQ 6.0 on OpenVMS, when the default rights of the MQM group are established, does not properly verify User Authorization File (UAF) data, which allows local users to kill listener processes and the command server via a control command.Show less
CVE-2011-4465 1Ibm 1Lotus Mobile Connect Apr 29, 2026 Nov 19, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL.
CVE-2011-4435 1Ibm 1Db2 Tools For Z/os Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive i...Show more The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent directory browsing, which allows remote attackers to obtain sensitive information via HTTP requests.Show less
CVE-2011-1375 1Ibm 1Aix Apr 29, 2026 Nov 11, 2011 N/A· v4 N/A· v3 4.9 MEDIUM· v2 IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial of service (system crash) via a crafted call.
CVE-2011-1373 1Ibm 1Db2 Apr 29, 2026 Nov 9, 2011 N/A· v4 N/A· v3 1.5 LOW· v2 Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (d...Show more Unspecified vulnerability in IBM DB2 9.7 before FP5 on UNIX, when the Self Tuning Memory Manager (STMM) feature and the AUTOMATIC DATABASE_MEMORY setting are configured, allows local users to cause a denial of service (daemon crash) via unknown vectors.Show less
CVE-2009-0905 1Ibm 1Websphere Mq Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 1.7 LOW· v2 IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial subst...Show more IBM WebSphere MQ 6.0 before 6.0.2.8 and 7.0 before 7.0.1.0 does not properly handle long group names, which might allow local users to gain privileges by leveraging combinations of group names with the same initial substring.Show less
CVE-2009-0900 1Ibm 1Websphere Mq Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 4.1 MEDIUM· v2 Heap-based buffer overflow in the client in IBM WebSphere MQ 6.0 before 6.0.2.7 and 7.0 before 7.0.1.0 allows local users to gain privileges via crafted SSL information in a Client Channel Definition Table (CCDT) file.
CVE-2011-1367 1Ibm 1Rational Appscan Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 9.3 HIGH· v2 Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote attackers to execute arbitrary commands via a crafted .scan file.
CVE-2011-1366 1Ibm 1Rational Appscan Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 8.8 HIGH· v2 Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent...Show more Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archive.Show less
CVE-2009-2748 1Ibm 1Websphere Application Server Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML v...Show more Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2009-2747 1Ibm 1Websphere Application Server Apr 29, 2026 Oct 30, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry o...Show more The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call.Show less
CVE-2011-1370 1Ibm 1Lotus Sametime Apr 29, 2026 Oct 29, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configu...Show more The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authentication requirement, which allows remote attackers to read the configuration settings by examining a response message.Show less
CVE-2011-1368 1Ibm 1Websphere Application Server Apr 29, 2026 Oct 29, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which allows remote attackers to read unspecified files via unknown vectors.

Previous 1...348349350...413 Next