Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-6105 1Ibm 2Workplace For Business Controls And Reporting Workplace Web Content Management Apr 23, 2026 Feb 10, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecifie...Show more Cross-site scripting (XSS) vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.Show less
CVE-2009-0391 1Ibm 1Websphere Application Server Apr 23, 2026 Feb 2, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.0.1 on z/OS allows attackers to read arbitrary files via unknown vectors.
CVE-2009-0370 1Ibm 1Aix Apr 23, 2026 Jan 30, 2009 N/A· v4 N/A· v3 7.2 HIGH· v2 Multiple unspecified vulnerabilities in IBM AIX 5.2.0 through 6.1.2 allow local users to append data to arbitrary files, related to (1) rmsock and (2) rmsock64 not creating "secure log files."
CVE-2009-0178 1Ibm 1Hardware Management Console Apr 23, 2026 Jan 20, 2009 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors.
CVE-2009-0173 1Ibm 1Db2 Universal Database Apr 23, 2026 Jan 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.
CVE-2009-0172 1Ibm 1Db2 Universal Database Apr 23, 2026 Jan 16, 2009 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
CVE-2009-0120 1Ibm 1Websphere Datapower Xml Security Gateway Xs40 Apr 23, 2026 Jan 15, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the...Show more The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.Show less
CVE-2008-5686 1Ibm 1Tivoli Provisioning Manager Apr 23, 2026 Dec 19, 2008 N/A· v4 N/A· v3 8.5 HIGH· v2 IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticate...Show more IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticated users to execute SOAP commands that access arbitrary TPM functionality, as demonstrated by running provisioning workflows.Show less
CVE-2008-5675 1Ibm 1Websphere Portal Apr 23, 2026 Dec 19, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuthTAI."
CVE-2008-5414 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameT...Show more Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."Show less
CVE-2008-5413 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: t...Show more PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434.Show less
CVE-2008-5412 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438.
CVE-2008-5411 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
CVE-2008-5387 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.
CVE-2008-5386 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.
CVE-2008-5385 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors.
CVE-2008-5384 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor.
CVE-2008-5330 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1....Show more Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page.Show less
CVE-2008-5329 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the...Show more ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.Show less
CVE-2008-5328 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obt...Show more The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.Show less

Previous 1...375376377...413 Next