IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-20424IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is
- CVE-2021-20423IBM Cloud Pak for Applications 4.3 could allow an authenticated user gain escalated privilesges due to improper application permissions.
- CVE-2021-20422IBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory.
- CVE-2021-20369IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti
- CVE-2021-20368IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20366IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20365IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20364IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20363IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20362IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20361IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting.
- CVE-2021-20360IBM Cloud Pak for Applications 4.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti
- CVE-2021-29822IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.
- CVE-2021-29805IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29804IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29803IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.
- CVE-2021-29794IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic a
- CVE-2021-29792IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the c
- CVE-2021-20414IBM Guardium Data Encryption (GDE) 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number o
- CVE-2020-4938IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized
- CVE-2021-29730IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection.
- CVE-2021-29712IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- CVE-2021-29711IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 6.2.7.8 , 6.2.7.9, 7.0.3.0, 7.0.4.0, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2 could allo
- CVE-2021-29759IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from int
- CVE-2021-20474IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user i
- CVE-2021-20417IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error mes
- CVE-2021-20416IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 could allow a remote attacker to obtain sensitive information, caused by the failure
- CVE-2021-20415IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force acco
- CVE-2021-20379IBM Guardium Data Encryption (GDE) 3.0.0.3 and 4.0.0.4 uses weaker than expected cryptographic algorithms that could allow an attacker to de
- CVE-2021-20378IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to i