IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4865IBM Jazz Foundation products is vulnerable to cross-site scripting.
- CVE-2020-4855IBM Jazz Foundation products is vulnerable to cross-site scripting.
- CVE-2020-4547IBM Jazz Foundation products could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2020-4524IBM Jazz Foundation products is vulnerable to cross-site scripting.
- CVE-2020-4967IBM Cloud Pak for Security (CP4S) 1.3.0.1 could disclose sensitive information through HTTP headers which could be used in further attacks a
- CVE-2020-4820IBM Cloud Pak for Security (CP4S) 1.4.0.0 is vulnerable to cross-site scripting.
- CVE-2020-4816IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly e
- CVE-2020-4815IBM Cloud Pak for Security (CP4S) 1.4.0.0 could allow a remote user to obtain sensitive information from HTTP response headers that could be
- CVE-2020-4628IBM Cloud Pak for Security (CP4S) 1.3.0.1 and 1.4.0.0 could allow a remote attacker to obtain sensitive information when a detailed technica
- CVE-2020-4949IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML d
- CVE-2020-4889IBM Spectrum Scale 5.0.0 through 5.0.5.4 and 5.1.0 could allow a local user to poison log files which could impact support and development e
- CVE-2020-4766IBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which wou
- CVE-2020-4969IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure
- CVE-2020-4968IBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to d
- CVE-2020-4966IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies.
- CVE-2020-4958IBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user
- CVE-2020-4983IBM Spectrum LSF 10.1 and IBM Spectrum LSF Suite 10.2 could allow a user on the local network who has privileges to submit LSF jobs to execu
- CVE-2020-4921IBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection.
- CVE-2020-4887IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files
- CVE-2020-4688IBM Security Guardium 10.6 and 11.2 could allow a local attacker to execute arbitrary commands on the system as an unprivileged user, caused
- CVE-2020-4881IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the lack of server hostname verification
- CVE-2020-4873IBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy.
- CVE-2020-4871IBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2020-4604IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local privileged user.
- CVE-2020-4602IBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user.
- CVE-2020-4600IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message i
- CVE-2020-4599IBM Security Guardium Insights 2.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message i
- CVE-2020-4597IBM Security Guardium Insights 2.0.2 does not set the secure attribute on authorization tokens or session cookies.
- CVE-2020-4596IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi
- CVE-2020-4595IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi