Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-5084 1Ibm 1Tivoli Federated Identity Manager Apr 29, 2026 Aug 12, 2011 N/A· v4 N/A· v3 1.9 LOW· v2 IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow...Show more IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data.Show less
CVE-2009-5083 1Ibm 1Tivoli Federated Identity Manager Apr 29, 2026 Aug 12, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which...Show more IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.Show less
CVE-2008-7299 1Ibm 1Tivoli Federated Identity Manager Apr 29, 2026 Aug 12, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers to spoof assertions via vectors related to the Issuer field.
CVE-2011-1357 1Ibm 1Websphere Service Registry And Repository Apr 29, 2026 Aug 11, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to...Show more Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header.Show less
CVE-2011-3124 1Ibm 2Infosphere Datastage Infosphere Information Server Apr 29, 2026 Aug 10, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to g...Show more IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns incorrect ownership to unspecified files, which allows local users to gain privileges via unknown vectors.Show less
CVE-2011-3123 1Ibm 2Infosphere Datastage Infosphere Information Server Apr 29, 2026 Aug 10, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain p...Show more IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.Show less
CVE-2011-2893 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference.
CVE-2011-2888 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.
CVE-2011-2887 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document.
CVE-2011-2886 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets.
CVE-2011-2885 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.
CVE-2011-2884 1Ibm 1Lotus Symphony Apr 29, 2026 Jul 27, 2011 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."
CVE-2011-1356 1Ibm 1Websphere Application Server Apr 29, 2026 Jul 19, 2011 N/A· v4 N/A· v3 2.1 LOW· v2 IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows local users to obtain sensitive stack-trace information via a crafted Administration Console request.
CVE-2011-1355 1Ibm 1Websphere Application Server Apr 29, 2026 Jul 19, 2011 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logo...Show more Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the logoutExitPage parameter.Show less
CVE-2010-3271 1Ibm 1Websphere Application Server Apr 29, 2026 Jul 18, 2011 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack...Show more Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.Show less
CVE-2011-2759 1Ibm 1Tivoli Directory Server Apr 29, 2026 Jul 17, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it eas...Show more The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.Show less
CVE-2011-2758 1Ibm 1Tivoli Directory Server Apr 29, 2026 Jul 17, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtai...Show more IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for access to LDAP Server log files, which allows remote attackers to obtain sensitive information via a crafted URL.Show less
CVE-2011-2754 1Ibm 2Web Content Manager Websphere Portal Apr 29, 2026 Jul 17, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers...Show more Cross-site scripting (XSS) vulnerability in the PageBuilder2 (aka Page Builder) theme in IBM WebSphere Portal 7.x before 7.0.0.1 CF006, as used in IBM Web Content Manager (WCM) and other products, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2011-1223 1Ibm 1Tivoli Storage Manager Apr 29, 2026 Jul 17, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before...Show more Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows allows local users to gain privileges via unspecified vectors.Show less
CVE-2011-1222 1Ibm 1Tivoli Storage Manager Apr 29, 2026 Jul 17, 2011 N/A· v4 N/A· v3 7.2 HIGH· v2 Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows and AIX a...Show more Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows and AIX allows local users to gain privileges via unspecified vectors.Show less

Previous 1...350351352...413 Next