IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2018-1982IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1952IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.
- CVE-2018-1929IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 could allow a malicious user to be allowed to view any view if he knows the URL
- CVE-2018-1916IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting.
- CVE-2018-1914IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1910IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1908IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting.
- CVE-2018-1829IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1825IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1824IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1823IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1764IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1763IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1761IBM Rational Team Concert 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1759IBM Rational Quality Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting.
- CVE-2018-1688IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to cross-site scripting.
- CVE-2018-1658IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 through 6.0.6) is vulnerable to HTTP header injection, caused by im
- CVE-2019-4016IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could
- CVE-2019-4015IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could
- CVE-2018-2009IBM API Connect v2018.1 and 2018.4.1 is affected by an information disclosure vulnerability in the consumer API.
- CVE-2018-1998IBM WebSphere MQ 8.0.0.0 through 9.1.1 could allow a local user to inject code that could be executed with root privileges.
- CVE-2018-1980IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could
- CVE-2018-1978IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could
- CVE-2018-1974IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels.
- CVE-2018-1923IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability tha
- CVE-2018-1922IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is affected by buffer overflow vulnerability tha
- CVE-2018-1902IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to spoof connection information which could be used to
- CVE-2018-1890IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevat
- CVE-2019-4030IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2018-1912IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting.