Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2009-0120 1Ibm 1Websphere Datapower Xml Security Gateway Xs40 Apr 23, 2026 Jan 15, 2009 N/A· v4 N/A· v3 7.8 HIGH· v2 The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the...Show more The IBM WebSphere DataPower XML Security Gateway XS40 with firmware 3.6.1.5 allows remote attackers to cause a denial of service (device reboot) by sending data over an established SSL connection, as demonstrated by the abc\r\n\r\n string data.Show less
CVE-2008-5686 1Ibm 1Tivoli Provisioning Manager Apr 23, 2026 Dec 19, 2008 N/A· v4 N/A· v3 8.5 HIGH· v2 IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticate...Show more IBM Tivoli Provisioning Manager (TPM) before 5.1.1.1 IF0006, when its LDAP service is shared with other applications, does not require that an LDAP user be listed in the TPM user records, which allows remote authenticated users to execute SOAP commands that access arbitrary TPM functionality, as demonstrated by running provisioning workflows.Show less
CVE-2008-5675 1Ibm 1Websphere Portal Apr 23, 2026 Dec 19, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Portal 6.0 before 6.0.1.5 has unknown impact and attack vectors related to "Access problems with BasicAuthTAI."
CVE-2008-5414 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameT...Show more Unspecified vulnerability in the Feature Pack for Web Services in the Web Services Security component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 has unknown impact and attack vectors related to "userNameToken."Show less
CVE-2008-5413 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: t...Show more PerfServlet in the PMI/Performance Tools component in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 allows attackers to obtain sensitive information by reading the (1) systemout.log and (2) ffdc files. NOTE: this is probably a duplicate of CVE-2009-0434.Show less
CVE-2008-5412 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 10.0 HIGH· v2 Unspecified vulnerability in IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 on Windows has unknown impact and attack vectors related to JSPs. NOTE: this is probably a duplicate of CVE-2009-0438.
CVE-2008-5411 1Ibm 1Websphere Application Server Apr 23, 2026 Dec 10, 2008 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IBM WebSphere Application Server (WAS) 7 before 7.0.0.1 sends SSL traffic over "unsecured TCP," which makes it easier for remote attackers to obtain sensitive information by sniffing the network.
CVE-2008-5387 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Buffer overflow in autoconf6 in IBM AIX 6.1.0 through 6.1.2, when Role-Based Access Control is enabled, allows local users with aix.network.config.tcpip authorization to gain privileges via unspecified vectors.
CVE-2008-5386 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 Buffer overflow in ndp in IBM AIX 6.1.0 through 6.1.2, when the netcd daemon is running, allows local users to gain privileges via unspecified vectors.
CVE-2008-5385 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 enq in bos.rte.printers in IBM AIX 6.1.0 through 6.1.2, when a print queue is defined in /etc/qconfig, allows local users to delete arbitrary files via unspecified vectors.
CVE-2008-5384 1Ibm 1Aix Apr 23, 2026 Dec 9, 2008 N/A· v4 N/A· v3 6.9 MEDIUM· v2 crontab in bos.rte.cron in IBM AIX 6.1.0 through 6.1.2 allows local users with aix.system.config.cron authorization to gain privileges by launching an editor.
CVE-2008-5330 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1....Show more Multiple cross-site scripting (XSS) vulnerabilities in the web interface in ClearCase RWP server in IBM Rational ClearCase 7.0.0 before 7.0.0.4, and 7.0.1.1-RATL-RCC-IFIX02 and possibly other 7.0.1 versions before 7.0.1.3, allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO of a URI associated with a VOB page.Show less
CVE-2008-5329 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 7.5 HIGH· v2 ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the...Show more ClearQuest Web in IBM Rational ClearQuest MultiSite before 7.1 allows remote servers to direct a client's submissions and changes to an arbitrary database by specifying multiple comma-separated server identifiers on the JTLRMIREGISTRYSERVERS line in a jtl.properties file.Show less
CVE-2008-5328 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obt...Show more The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree during an import process.Show less
CVE-2008-5327 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 6.5 MEDIUM· v2 The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to...Show more The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object tree.Show less
CVE-2008-5326 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.4 MEDIUM· v2 The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on...Show more The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.Show less
CVE-2008-5325 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...Show more Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.Show less
CVE-2008-5324 1Ibm 1Rational Clearquest Apr 23, 2026 Dec 5, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in CQ Web in IBM Rational ClearQuest 2007 before 2007D and 2008 before 2008B allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-5257 1Ibm 1Tivoli Access Manager For E Business Apr 23, 2026 Nov 27, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 webseald in WebSEAL 6.0.0.17 in IBM Tivoli Access Manager for e-business allows remote attackers to cause a denial of service (crash or hang) via HTTP requests, as demonstrated by a McAfee vulnerability scan.
CVE-2008-5228 1Ibm 1Workplace Content Management Apr 23, 2026 Nov 25, 2008 N/A· v4 N/A· v3 2.6 LOW· v2 Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or H...Show more Cross-site scripting (XSS) vulnerability in IBM Workplace Content Management (WCM) 6.0G and 6.1 before CF8, when a Page Navigation Component shows menu entries, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in the URI, related to parameters "not being encoded."Show less

Previous 1...398399400...436 Next