IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1489IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability.
- CVE-2017-1376A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges.
- CVE-2017-1110IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 contains an unspecified vulnerability that could allow an authenticated user to v
- CVE-2016-9732IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting.
- CVE-2016-2970IBM Sametime 8.5 and 9.0 meetings server may provide detailed information in an error message that may provide details about the application
- CVE-2017-1422IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose se
- CVE-2017-1501IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the w
- CVE-2017-1338IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1469IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in ins
- CVE-2017-1190IBM Emptoris Strategic Supply Management Platform 10.x and 10.1 could allow a local user with special access roles to execute arbitrary code
- CVE-2016-6029IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 could allow a remote attacker to obtain sensitive information, caused by the
- CVE-2016-6021IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting.
- CVE-2017-1431IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting.
- CVE-2017-1377IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system.
- CVE-2017-1192IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.
- CVE-2017-1174IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection.
- CVE-2017-1168IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1448IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redire
- CVE-2017-1357IBM Maximo Asset Management 7.5 and 7.6 could allow an authenticated user to manipulate work orders to forge emails which could be used to c
- CVE-2016-8949IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redire
- CVE-2016-6121IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting.
- CVE-2017-1331IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting.
- CVE-2017-1504IBM WebSphere Application Server version 9.0.0.4 could provide weaker than expected security after using the PasswordUtil command to enable
- CVE-2017-1327IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2017-1199IBM InfoSphere Master Data Management Server 10.0, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting.
- CVE-2017-1495IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensiti
- CVE-2017-1468IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in ins
- CVE-2017-1467A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized
- CVE-2017-1383IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
- CVE-2017-1118IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configure