IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-4471IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions
- CVE-2020-4470IBM Spectrum Protect Plus 10.1.0 through 10.1.5 Administrative Console could allow an authenticated attacker to upload arbitrary files which
- CVE-2020-4469IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to execute arbitrary code on the system.
- CVE-2020-4406IBM Spectrum Protect Client 8.1.7.0 through 8.1.9.1 (Linux and Windows), 8.1.9.0 trough 8.1.9.1 (AIX) and IBM Spectrum Protect for Space Man
- CVE-2020-4216IBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for
- CVE-2020-4251IBM API Connect 5.0.0.0 through 5.0.8.8 is vulnerable to cross-site scripting.
- CVE-2020-4380IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting.
- CVE-2020-4436Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate kn
- CVE-2020-4435Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attac
- CVE-2020-4434Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could a
- CVE-2020-4433Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.
- CVE-2020-4432Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate
- CVE-2019-4576IBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong passwords by default, wh
- CVE-2020-4529IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF).
- CVE-2020-4450IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specia
- CVE-2020-4449IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a spe
- CVE-2020-4448IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the sy
- CVE-2020-4229IBM Worklight/MobileFoundation 8.0.0.0 does not properly invalidate session cookies when a user logs out of a session, which could allow ano
- CVE-2020-4509IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2020-4193IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
- CVE-2020-4191IBM Security Guardium 11.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive infor
- CVE-2020-4183IBM Security Guardium 11.1 is vulnerable to cross-site scripting.
- CVE-2020-4307IBM Security Guardium 11.1 could allow an attacker on the same network to gain access to the Solr dashboard and cause a denial of service at
- CVE-2020-4190IBM Security Guardium 10.6, 11.0, and 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its o
- CVE-2020-4187IBM Security Guardium 11.1 could disclose sensitive information on the login page that could aid in further attacks against the system.
- CVE-2020-4182IBM Security Guardium 11.1 is vulnerable to cross-site scripting.
- CVE-2020-4180IBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system.
- CVE-2020-4177IBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe
- CVE-2020-4503IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.
- CVE-2020-4431IBM Planning Analytics Local 2.0 is vulnerable to cross-site scripting.