IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2021-20350IBM Engineering products are vulnerable to cross-site scripting.
- CVE-2021-20340IBM Engineering products are vulnerable to cross-site scripting.
- CVE-2020-4975IBM Engineering products are vulnerable to cross-site scripting.
- CVE-2020-4866IBM Engineering products are vulnerable to cross-site scripting.
- CVE-2020-4863IBM Engineering products are vulnerable to stored cross-site scripting.
- CVE-2020-4857IBM Engineering products are vulnerable to stored cross-site scripting.
- CVE-2020-4856IBM Engineering products are vulnerable to stored cross-site scripting.
- CVE-2021-20442IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe
- CVE-2021-20441IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor
- CVE-2020-4726The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user
- CVE-2020-4725IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request t
- CVE-2020-4719The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configur
- CVE-2020-4931IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing
- CVE-2020-4953IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal structure by e
- CVE-2021-20446IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting.
- CVE-2021-20445IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication cred
- CVE-2021-20444IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting.
- CVE-2021-20443IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intende
- CVE-2021-20354IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories.
- CVE-2020-4933IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting.
- CVE-2020-4956IBM Spectrum Protect Operations Center 7.1 and 8.1 is vulnerable to a denial of service, caused by a RPC that allows certain cache values to
- CVE-2020-4955IBM Spectrum Protect Operations Center 7.1 and 8.1could allow a remote attacker to execute arbitrary code on the system, caused by improper
- CVE-2020-4954IBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to bypass authentication restrictions, caused by improper s
- CVE-2021-20412IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it use
- CVE-2021-20411IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updati
- CVE-2021-20410IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user
- CVE-2021-20409IBM Security Verify Information Queue information disclosure
- CVE-2021-20408IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of
- CVE-2021-20407IBM Security Verify Information Queue information disclosure
- CVE-2021-20406IBM Security Verify Information Queue information disclosure