IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-20528IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting.
- CVE-2021-20374IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting.
- CVE-2020-4765IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2020-4646IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an au
- CVE-2021-29747IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain highly sensitive information due to a vulnerability in the au
- CVE-2020-4670IBM Planning Analytics Local 2.0 connects to a Redis server.
- CVE-2020-4669IBM Planning Analytics Local 2.0 connects to a MongoDB server.
- CVE-2021-20565IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 uses a protection mechanism that relies on the existence o
- CVE-2021-20564IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a remote attacker to obtain sensitive informat
- CVE-2021-20429IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could disclose sensitive information due an overly permissive cross-domain policy.
- CVE-2021-20393IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technic
- CVE-2021-20392IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting.
- CVE-2021-20391IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system
- CVE-2020-4985IBM Planning Analytics Local 2.0 could allow an attacker to obtain sensitive information due to accepting body parameters in a query.
- CVE-2020-4811IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious d
- CVE-2021-20535IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF).
- CVE-2020-4536IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is retu
- CVE-2020-4535IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting.
- CVE-2021-20577IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting.
- CVE-2021-20559IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting.
- CVE-2021-20538IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not
- CVE-2020-4901IBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or cause
- CVE-2021-20401IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth
- CVE-2021-20397IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
- CVE-2020-5013IBM QRadar SIEM 7.3 and 7.4 may vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2020-4993IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path tr
- CVE-2020-4979IBM QRadar SIEM 7.3 and 7.4 is vulnerable to insecure inter-deployment communication.
- CVE-2020-4932IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound auth
- CVE-2020-4929IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting.
- CVE-2020-4883IBM QRadar SIEM 7.3 and 7.4 could disclose sensitive information about other domains which could be used in further attacks against the syst