IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4987The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and
- CVE-2021-20515IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking.
- CVE-2021-29667IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection.
- CVE-2021-29666IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting.
- CVE-2021-20550IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- CVE-2021-20549IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- CVE-2021-20448IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting.
- CVE-2020-4981IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation.
- CVE-2021-29694IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h
- CVE-2021-29672IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when
- CVE-2021-20546IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking.
- CVE-2021-20536IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files that could be read by a
- CVE-2021-20532IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the syste
- CVE-2021-20432IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privile
- CVE-2020-4562IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestr
- CVE-2021-20501IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, cause
- CVE-2021-20454IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML da
- CVE-2021-20453IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2021-20527IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user.
- CVE-2021-20491IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of
- CVE-2021-20519IBM Jazz Team Server products are vulnerable to cross-site scripting.
- CVE-2020-4965IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inf
- CVE-2020-4964IBM Jazz Team Server products contain an undisclosed vulnerability that could allow an authenticated user to present a customized message on
- CVE-2020-4920IBM Jazz Team Server products are vulnerable to stored cross-site scripting.
- CVE-2021-29671IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled.
- CVE-2021-20480IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF).
- CVE-2020-4997IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
- CVE-2020-4792IBM Edge 4.2 is vulnerable to cross-site scripting.
- CVE-2021-20520IBM Jazz Foundation Products are vulnerable to cross-site scripting.
- CVE-2021-20518IBM Jazz Foundation Products are vulnerable to cross-site scripting.