IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-29807IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29806IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29842IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames d
- CVE-2021-29825IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BAC
- CVE-2021-29763IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to
- CVE-2021-29752IBM Db2 11.2 and 11.5 contains an information disclosure vulnerability, exposing remote storage credentials to privileged users under specif
- CVE-2021-29773IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details cause
- CVE-2021-29750IBM QRadar SIEM 7.3 and 7.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info
- CVE-2021-20433IBM Security Guardium 11.3 could allow a an authenticated user to obtain sensitive information that could be used in further attacks against
- CVE-2021-29841IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting.
- CVE-2021-20582IBM Security Secret Server up to 11.0 stores sensitive information in URL parameters.
- CVE-2021-20569IBM Security Secret Server up to 11.0 could allow an attacker to enumerate usernames due to improper input validation.
- CVE-2021-20508IBM Security Secret Server up to 11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message
- CVE-2021-29853IBM Planning Analytics 2.0 could expose information that could be used to to create attacks by not validating the return values from some me
- CVE-2021-29852IBM Planning Analytics 2.0 is vulnerable to cross-site scripting.
- CVE-2021-29851IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser.
- CVE-2021-29907IBM OpenPages with Watson 8.1 and 8.2 could allow an authenticated user to upload a file that could execute arbitrary code on the system.
- CVE-2021-29743IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.
- CVE-2021-29728IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 contains hard-coded credentials, such as a password or cryptographic key, which
- CVE-2021-29723IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker
- CVE-2021-29722IBM Sterling Secure Proxy 6.0.1, 6.0.2, 2.4.3.2, and 3.4.3.2 uses weaker than expected cryptographic algorithms that could allow an attacker
- CVE-2021-29744IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting.
- CVE-2021-29862IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of ser
- CVE-2021-29801IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to gain root privileges.
- CVE-2021-29772IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input.
- CVE-2021-29727IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user to exploit a vulnerability in the AIX kernel to cause a denial of service.
- CVE-2021-29715IBM API Connect 5.0.0.0 through 5.0.8.11 could alllow a remote user to obtain sensitive information or conduct denial of serivce attacks due
- CVE-2021-29802IBM Security SOAR performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or
- CVE-2021-29704IBM Security SOAR uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- CVE-2020-4992IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.16 is vulnerable to cross-site request forgery which could allow an attacker to execute ma