Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-36001 1Ibm 1Db2 Jun 17, 2026 Jan 30, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML t...Show more IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion.Show less
CVE-2025-2668 1Ibm 1Db2 Jun 17, 2026 Jan 30, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 is vulnerable to a denial of service as the server may crash when an authenticated user creates a specially crafted query.
CVE-2025-36419 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 5.3 MEDIUM· v3 N/A· v2 IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.
CVE-2025-36418 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or t...Show more IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to craft or modify a JSON web token in order to impersonate another user or to elevate their privileges.Show less
CVE-2025-36411 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 3.5 LOW· v3 N/A· v2 IBM ApplinX 11.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2025-36410 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM ApplinX 11.1 could allow an authenticated user to perform unauthorized administrative actions on the server due to server-side enforcement of client-side security.
CVE-2025-36409 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cre...Show more IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36408 1Ibm 1Applinx Jun 17, 2026 Jan 20, 2026 N/A· v4 6.4 MEDIUM· v3 N/A· v2 IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...Show more IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36397 1Ibm 1Application Gateway Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security contex...Show more IBM Application Gateway 23.10 through 25.09 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.Show less
CVE-2025-36396 1Ibm 1Application Gateway Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality...Show more IBM Application Gateway 23.10 through 25.09 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36115 1Ibm 1Sterling Connect\ Jun 17, 2026 Jan 20, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0.00 through 5.2.0.12 does not disallow the session id after use which could allow an authenticated user to impersonate another user on the system.
CVE-2025-36113 1Ibm 1Sterling Connect\ Jun 17, 2026 Jan 20, 2026 N/A· v4 5.4 MEDIUM· v3 N/A· v2 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code i...Show more IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36066 1Ibm 1Sterling Connect\ Jun 17, 2026 Jan 20, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript...Show more IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.Show less
CVE-2025-36065 1Ibm 1Sterling Connect\ Jun 17, 2026 Jan 20, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on...Show more IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a browser closure which could allow an authenticated user to impersonate another user on the system.Show less
CVE-2025-36063 1Ibm 1Sterling Connect\ Jun 17, 2026 Jan 20, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the syste...Show more IBM Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.0 5.2.0.00 through 5.2.0.12 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.Show less
CVE-2025-36059 1Ibm 1Business Automation Workflow Jun 17, 2026 Jan 20, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a loc...Show more IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation could allow a local user with access to the container to execute OS system calls.Show less
CVE-2025-36058 1Ibm 1Business Automation Workflow Jun 17, 2026 Jan 20, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business...Show more IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim Fix 006. IBM Cloud Pak for Business Automation and IBM Business Automation Workflow containers may disclose sensitve configuration information in a config map.Show less
CVE-2025-33015 1Ibm 1Concert Jun 17, 2026 Jan 20, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 IBM Concert 1.0.0 through 2.1.0 is vulnerable to malicious file upload by not validating the content of the file uploaded to the web interface.
CVE-2025-1722 1Ibm 1Concert Jun 17, 2026 Jan 20, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-1719 1Ibm 1Concert Jun 17, 2026 Jan 20, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.

Previous 1...373839...436 Next