IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4336IBM WebSphere eXtreme Scale 8.6.1 stores sensitive information in URL parameters.
- CVE-2020-4899IBM API Connect 5.0.0.0 through 5.0.8.10 could potentially leak sensitive information or allow for data corruption due to plain text transmi
- CVE-2020-4762IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow an authenticated us
- CVE-2020-4761IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker t
- CVE-2019-4728IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_2, 6.0.0.0 through 6.0.3.2, and 6.1.0.0 could allow a remote attacker t
- CVE-2020-4942IBM Curam Social Program Management 7.0.9 and 7.0.11 is vulnerable to cross-site request forgery which could allow an attacker to execute ma
- CVE-2020-4928IBM Cloud Pak System 2.3 could allow a local privileged attacker to upload arbitrary files.
- CVE-2020-4919IBM Cloud Pak System 2.3 has insufficient logout controls which could allow an authenticated privileged user to impersonate another user on
- CVE-2020-4918IBM Cloud Pak System 2.3 could allow l local privileged user to disclose sensitive information due to an insecure direct object reference in
- CVE-2020-4917IBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized act
- CVE-2020-4916IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- CVE-2020-4913IBM Cloud Pak System 2.3 could reveal credential information in the HTTP response to a local privileged user.
- CVE-2020-4912IBM Cloud Pak System 2.3 Self Service Console could allow a privilege escalation by capturing the user request URL when logged in as a privi
- CVE-2020-4910IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- CVE-2020-4909IBM Cloud Pak System 2.3 is vulnerable to cross-site scripting.
- CVE-2020-4642IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow local attacker to cause a deni
- CVE-2020-4843IBM Security Secret Server 10.6 stores potentially sensitive information in config files that could be read by an authenticated user.
- CVE-2020-4842IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is ret
- CVE-2020-4841IBM Security Secret Server 10.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP
- CVE-2020-4840IBM Security Secret Server 10.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2020-4870IBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications.
- CVE-2020-4794IBM Automation Workstream Services 19.0.3, 20.0.1, 20.0.2, IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Ma
- CVE-2020-4757IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting.
- CVE-2020-4555IBM Financial Transaction Manager 3.0.6 and 3.1.0 does not invalidate session after logout which could allow an authenticated user to impers
- CVE-2020-4764IBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized a
- CVE-2020-4846IBM Security Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical err
- CVE-2020-4845IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting.
- CVE-2020-4908IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 returns the product version and release information on the log
- CVE-2020-4907IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 could allow a remote attacker to obtain sensitive information
- CVE-2020-4906IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4 allows web pages to be stored locally which can be read by ano