IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1760IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information.
- CVE-2017-1683IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1632IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting.
- CVE-2017-1613IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive Engagemen
- CVE-2017-1606IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection.
- CVE-2017-1550IBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords.
- CVE-2017-1549IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting.
- CVE-2017-1548IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system.
- CVE-2017-1536IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting.
- CVE-2017-1498IBM Connections 5.5 is vulnerable to cross-site scripting.
- CVE-2017-1497IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the director
- CVE-2017-1487IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system.
- CVE-2017-1482IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting.
- CVE-2017-1481IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another user.
- CVE-2017-1465IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2017-1433IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which wou
- CVE-2017-1356IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection.
- CVE-2017-1355IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters.
- CVE-2017-1354IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting.
- CVE-2017-1353IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting use
- CVE-2017-1342IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that could e used to cond
- CVE-2017-1341IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been
- CVE-2017-1336IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files.
- CVE-2017-1271IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotiate which algorithm sh
- CVE-2017-1689IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1688IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1678IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1650IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1628IBM Business Process Manager 8.6.0.0 allows authenticated users to stop and resume the Event Manager by calling a REST API with incorrect au
- CVE-2017-1607IBM DOORS Next Generation (DNG/RRC) 6.0 is vulnerable to cross-site scripting.