IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4594IBM Security Guardium Insights 2.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensi
- CVE-2019-4702IBM Security Guardium Data Encryption (GDE) 3.0.0.2 specifies permissions for a security-critical resource in a way that allows that resourc
- CVE-2019-4687IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters.
- CVE-2019-4160IBM Security Guardium Data Encryption (GDE) 3.0.0.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decry
- CVE-2020-4838IBM API Connect 5.0.0.0 through 5.0.8.10 is vulnerable to stored cross-site scripting.
- CVE-2020-4674IBM Workload Automation 9.5 stores the server path in URLs that could aid in further attacks against the system.
- CVE-2020-4673IBM Workload Automation 9.5 stores sensitive information in HTML comments that could aid in further attacks against the system.
- CVE-2020-4869IBM MQ Appliance 9.2 CD and 9.2 LTS is vulnerable to a denial of service, caused by a buffer overflow.
- CVE-2020-4733IBM Jazz Foundation products are vulnerable to cross-site scripting.
- CVE-2020-4697IBM Jazz Foundation products are vulnerable to cross-site scripting.
- CVE-2020-4691IBM Jazz Foundation Products are vulnerable to cross-site scripting.
- CVE-2020-4544IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is return
- CVE-2020-4487IBM Jazz Foundation Products could allow a remote attacker to obtain sensitive information when a detailed technical error message is return
- CVE-2020-5022IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attac
- CVE-2020-5021IBM Spectrum Protect Plus 10.1.0 through 10.1.6 does not invalidate session after a password reset which could allow a local user to imperso
- CVE-2020-5020IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2020-5019IBM Spectrum Protect Plus 10.1.0 through 10.1.6 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST h
- CVE-2020-5018IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may include sensitive information in its URLs increasing the risk of such information being
- CVE-2020-5017IBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow a local user to obtain access to information beyond their intended role and permis
- CVE-2020-4667IBM Engineering Requirements Quality Assistant On-Premises could allow an authenticated user to obtain sensitive information due to improper
- CVE-2020-4666IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting.
- CVE-2020-4664IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting.
- CVE-2020-4663IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting.
- CVE-2020-4606IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2020-4898IBM Emptoris Strategic Supply Management 10.1.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h
- CVE-2020-4897IBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitiv
- CVE-2020-4896IBM Emptoris Sourcing 10.1.0, 10.1.1, and 10.1.3 is vulnerable to web cache poisoning, caused by improper input validation by modifying HTTP
- CVE-2020-4895IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting.
- CVE-2020-4893IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 transmits sensitive information in HTTP GET request parameters.
- CVE-2020-4892IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting.