IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2019-4689IBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to
- CVE-2019-4688IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies.
- CVE-2019-4686IBM Security Guardium Data Encryption (GDE) 3.0.0.2 does not set the secure attribute on authorization tokens or session cookies.
- CVE-2018-1501IBM Security Guardium 10.5, 10.6, and 11.0 could allow an unauthorized user to obtain sensitive information due to missing security controls
- CVE-2020-4598IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2020-4593IBM Security Guardium Insights 2.0.1 stores user credentials in plain in clear text which can be read by a local user.
- CVE-2020-4587IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bound
- CVE-2020-4383IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during
- CVE-2020-4382IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.5 could allow an authenticated user to cause a denial of service during
- CVE-2020-4170IBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unau
- CVE-2020-4165IBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2018-1985IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buf
- CVE-2020-4687IBM Content Navigator 3.0.7 and 3.0.8 could allow an authenticated user to view cached content of another user that they should not have acc
- CVE-2020-4548IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation.
- CVE-2020-4653IBM Planning Analytics 2.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2020-4648A vulnerability exsists in IBM Planning Analytics 2.0 whereby avatars in Planning Analytics Workspace could be modified by other users witho
- CVE-2020-4381IBM Spectrum Scale for IBM Elastic Storage Server 5.3.0 through 5.3.6 could allow an authenticated user to cause a denial of service during
- CVE-2020-4686IBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should
- CVE-2020-4662IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation.
- CVE-2020-4589IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a special
- CVE-2019-4582IBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to traverse directories on the system.
- CVE-2020-4486IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect insta
- CVE-2020-4485IBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing
- CVE-2020-4541IBM Jazz Reporting Service 7.0 and 7.0.1 is vulnerable to cross-site scripting.
- CVE-2020-4539IBM Jazz Reporting Service 6.0.2, 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to cross-site scripting.
- CVE-2020-4533IBM Jazz Reporting Service 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting.
- CVE-2020-4481IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when proces
- CVE-2020-4243IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information usin
- CVE-2020-4631IBM Spectrum Protect Plus 10.1.0 through 10.1.6 agent files, in non-default configurations, on Windows are assigned access to everyone with
- CVE-2020-4542IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting.