IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-4471IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure fl
- CVE-2021-29665IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a loca
- CVE-2021-20585IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against t
- CVE-2021-20576IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application
- CVE-2021-20575IBM Security Verify Access 20.07 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2021-20492IBM WebSphere Application Server 8.0, 8.5, 9.0, and Liberty Java Batch is vulnerable to an XML External Entity Injection (XXE) attack when p
- CVE-2021-20487IBM Power9 Self Boot Engine(SBE) could allow a privileged user to inject malicious code and compromise the integrity of the host firmware by
- CVE-2021-20486IBM Cloud Pak for Data 3.0 could allow an authenticated user to obtain sensitive information when installed with additional plugins.
- CVE-2019-4588IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitr
- CVE-2021-29708IBM Spectrum Scale 5.1.0.1 could allow a local with access to the GUI pod container to obtain sensitive cryptographic keys that could allow
- CVE-2021-29695IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system.
- CVE-2020-4839IBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking.
- CVE-2021-20557IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially cr
- CVE-2021-20428IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned
- CVE-2021-20426IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe
- CVE-2021-20419IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor
- CVE-2021-20389IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user.
- CVE-2021-20386IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
- CVE-2021-20385IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system.
- CVE-2020-4990IBM Security Guardium 11.2 is vulnerable to SQL injection.
- CVE-2021-29681IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query.
- CVE-2021-29692IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable
- CVE-2021-29691IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbo
- CVE-2021-29688IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is
- CVE-2021-29687IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid
- CVE-2021-29686IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have acces
- CVE-2021-29683IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated user.
- CVE-2021-29682IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is
- CVE-2020-4850IBM Spectrum Scale 1.1.1.0 through 1.1.8.4 Transparent Cloud Tiering could allow a remote attacker to obtain sensitive information, caused b
- CVE-2021-20529IBM Control Center 6.2.0.0 could allow a user to obtain sensitive version information that could be used in further attacks against the syst