IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1425IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting.
- CVE-2017-1555IBM API Connect 5.0.0.0 through 5.0.7.2 could allow an authenticated user to generate an API token when not subscribed to the application pl
- CVE-2017-1551IBM API Connect 5.0.0.0 through 5.0.7.2 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2017-1424IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting.
- CVE-2017-1362IBM Security Identity Manager Adapters 6.0 and 7.0 stores user credentials in plain in clear text which can be read by a local user.
- CVE-2017-1235IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread which could potential
- CVE-2017-1490An unspecified vulnerability in the Lifecycle Query Engine of Jazz Reporting Service 6.0 through 6.0.4 could disclose highly sensitive infor
- CVE-2017-1556IBM API Connect 5.0.7.0 through 5.0.7.2 is vulnerable to a regular expression attack that could allow an authenticated attacker to use a reg
- CVE-2017-1508IBM Informix Dynamic Server 12.1 could allow a local user logged in with database administrator user to gain root privileges.
- CVE-2017-1520IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type
- CVE-2017-1519IBM DB2 10.5 and 11.1 contains a denial of service vulnerability.
- CVE-2017-1452IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user to obtain elevated priv
- CVE-2017-1451IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner
- CVE-2017-1439IBM DB2 for Linux, UNIX and Windows 9.7, 10,1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner
- CVE-2017-1438IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) could allow a local user with DB2 instance owner
- CVE-2017-1434IBM DB2 for Linux, UNIX and Windows 11.1 (includes DB2 Connect Server) under unusual circumstances, could expose highly sensitive informatio
- CVE-2017-1352IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to inject commands into work orders that could be executed by anot
- CVE-2017-1162IBM QRadar 7.2 and 7.3 discloses sensitive information to unauthorized users.
- CVE-2017-1491IBM QRadar Network Security 5.4 supports interaction between multiple actors and allows those actors to negotiate which algorithm should be
- CVE-2017-1458IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2017-1457IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting.
- CVE-2017-1130IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.
- CVE-2017-1129IBM Notes 8.5 and 9.0 is vulnerable to a denial of service.
- CVE-2017-1097IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to cross-site request forgery which could allow an
- CVE-2017-1450IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2017-1449IBM Emptoris Sourcing 9.5 - 10.1.3 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2017-1447IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting.
- CVE-2017-1444IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting.
- CVE-2017-1446IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting.
- CVE-2017-1445IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting.