IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1604IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting.
- CVE-2017-1462IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2018-1411IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
- CVE-2018-1410IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
- CVE-2018-1409IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
- CVE-2017-1682IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1499IBM Maximo Asset Management 7.5 and 7.6 could allow a remote attacker to include arbitrary files, which could allow the attacker to execute
- CVE-2018-1383A software logic bug creates a vulnerability in an AIX 6.1, 7.1, and 7.2 daemon which could allow a user with root privileges on one system,
- CVE-2017-1720IBM Notes 8.5 and 9.0 could allow a local attacker to execute arbitrary commands by carefully crafting a command line sent via the shared me
- CVE-2017-1714IBM Notes and Domino NSD 8.5 and 9.0 could allow an authenticated local user without administrative privileges to gain System privilege.
- CVE-2017-1711IBM iNotes 8.5 and 9.0 SUService can be misguided into running malicious code from a DLL masquerading as a windows DLL in the temp directory
- CVE-2018-1401IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- CVE-2018-1368IBM Security Guardium Database Activity Monitor 9.0, 9.1, and 9.5 could allow a local user with low privileges to view report pages and perf
- CVE-2017-1761IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- CVE-2018-1388GSKit V7 may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding.
- CVE-2018-1382IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting.
- CVE-2018-1366IBM Content Navigator 2.0 and 3.0 is vulnerable to Comma Separated Value (CSV) Injection.
- CVE-2017-1785IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated remote user to modify query parameters to obtain sensitive information.
- CVE-2017-1692IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level priv
- CVE-2017-1773IBM DataPower Gateways 7.1, 7,2, 7.5, and 7.6 could allow an attacker using man-in-the-middle techniques to spoof DNS responses to perform D
- CVE-2017-1233IBM Remote Control v9 could allow a local user to use the component to replace files to which he does not have write access and which he can
- CVE-2017-1731IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console.
- CVE-2018-1364IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2017-1784IBM Cognos Analytics 11.0 could produce results in temporary files that contain highly sensitive information that can be read by a local use
- CVE-2017-1783IBM Cognos Analytics 11.0 could allow a local user to change parameters set from the Cognos Analytics menus without proper authentication.
- CVE-2017-1779IBM Cognos Analytics 11.0 could store cached credentials locally that could be obtained by a local user.
- CVE-2017-1653IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting.
- CVE-2017-1567IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting.
- CVE-2017-1563IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting.
- CVE-2017-1545IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously sto