IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4782IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system.
- CVE-2020-4767IBM Sterling Connect Direct for Microsoft Windows 4.7, 4.8, 6.0, and 6.1 could allow a remote attacker to cause a denial of service, caused
- CVE-2020-4756IBM Spectrum Scale V4.2.0.0 through V4.2.3.23 and V5.0.0.0 through V5.0.5.2 as well as IBM Elastic Storage System 6.0.0 through 6.0.1.0 coul
- CVE-2020-4755IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting.
- CVE-2020-4749IBM Spectrum Scale 5.0.0 through 5.0.5.2 does not set the secure attribute on authorization tokens or session cookies.
- CVE-2020-4748IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting.
- CVE-2020-4564IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to
- CVE-2020-4491IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sendi
- CVE-2019-4680IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.2.2 is vulnerable to SQL injection.
- CVE-2020-4636IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting.
- CVE-2020-4254IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to
- CVE-2020-4499IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or al
- CVE-2019-4552IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks.
- CVE-2020-8332A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x serve
- CVE-2020-4395IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate
- CVE-2020-4741IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting.
- CVE-2020-4740IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection.
- CVE-2020-4689IBM Security Guardium 11.2 is vulnerable to CVS Injection.
- CVE-2020-4681IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
- CVE-2020-4680IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
- CVE-2020-4679IBM Security Guardium 11.2 is vulnerable to cross-site scripting.
- CVE-2020-4678IBM Security Guardium 11.2 could allow an attacker with admin access to obtain and read files that they normally would not have access to.
- CVE-2020-4388IBM Cognos Analytics 11.0 and 11.1 could be vulnerable to a denial of service attack by failing to catch exceptions in a servlet also exposi
- CVE-2020-4302IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection.
- CVE-2020-4781An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which co
- CVE-2020-4780OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10
- CVE-2020-4779A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10.
- CVE-2020-4778IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default
- CVE-2020-4776A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to trave
- CVE-2020-4775A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10.