IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-34320IBM CICS TX information disclosure
- CVE-2022-34317IBM CICS TX cross-site scripting
- CVE-2022-34318IBM CICS TX clickjacking
- CVE-2022-34316IBM CICS TX information disclosure
- CVE-2022-34314 IBM CICS TX 11.1 could disclose sensitive information to a local user due to insecure permission settings.
- CVE-2022-34315IBM CICS TX cross-site scripting
- CVE-2022-38705IBM CICS TX phishing
- CVE-2022-34312IBM CICS TX information disclosure
- CVE-2022-34329IBM CICS TX information disclosure
- CVE-2022-34319IBM CICS TX information disclosure
- CVE-2022-34313IBM CICS TX Standard is vulnerable to allowing attackers access to an application via insecure session cookies
- CVE-2022-35719IBM MQ Internet Pass-Thru 2.1, 9.2 LTS and 9.2 CD stores potentially sensitive information in trace files that could be read by a local user
- CVE-2022-31772IBM MQ denial of service
- CVE-2022-40753IBM InfoSphere Information Server cross-site scripting
- CVE-2022-36776IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting.
- CVE-2022-40750IBM WebSphere Application Server cross-site scripting
- CVE-2022-38385 IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow an authenticated user to obtain highly sensitive information or per
- CVE-2022-38387IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on the
- CVE-2022-34331IBM Power FW security bypass
- CVE-2022-42442IBM Robotic Process Automation for Cloud Pak information disclosure
- CVE-2022-38710IBM Robotic Process Automation information disclosure
- CVE-2021-39077IBM Security Guardium information disclosure
- CVE-2022-38388IBM Navigator Mobile Android 3.4.1.1 and 3.4.1.2 app could allow a local user to obtain sensitive information due to improper access control
- CVE-2022-34334IBM Sterling Partner Engagement Manager 2.0 does not invalidate session after logout which could allow an authenticated user to impersonate
- CVE-2022-41291IBM InfoSphere Information Server 11.7 does not invalidate session after logout which could allow an authenticated user to impersonate anoth
- CVE-2022-36772IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information that should only be available to a
- CVE-2022-34308IBM CICS TX 11.1 could allow a local user to cause a denial of service due to improper load handling.
- CVE-2022-30613IBM QRadar SIEM 7.4 and 7.5 could disclose sensitive information via a local service to a privileged user.
- CVE-2022-22493IBM WebSphere Automation for Cloud Pak for Watson AIOps 1.4.2 is vulnerable to cross-site request forgery, caused by improper cookie attribu
- CVE-2022-22480IBM QRadar SIEM 7.4 and 7.5 data node rebalancing does not function correctly when using encrypted hosts which could result in information d