IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-9981IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session.
- CVE-2017-1500A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framew
- CVE-2017-1496IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting.
- CVE-2017-1460IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin.
- CVE-2017-1386IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and d
- CVE-2017-1370IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from
- CVE-2017-1332IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2017-1303IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- CVE-2017-1227IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system.
- CVE-2016-9719IBM InfoSphere Master Data Management Server 10.1.
- CVE-2016-9718IBM InfoSphere Master Data Management Server 10.1.
- CVE-2016-9717HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1.
- CVE-2016-9716IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow
- CVE-2016-9715IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting.
- CVE-2016-9714IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could
- CVE-2017-1382IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissio
- CVE-2017-1380IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
- CVE-2017-1287IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2017-1249IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1245IBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2016-8975IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2016-6118IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting.
- CVE-2017-1381IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensit
- CVE-2017-1374Sensitive data can be exposed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 that can lead to an attacker gaining unauthorized ac
- CVE-2017-1373Reports executed in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user t
- CVE-2017-1372IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting.
- CVE-2017-1371Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated u
- CVE-2017-1267IBM Security Guardium 10.0 and 10.1 processes patches, image backups and other updates without sufficiently verifying the origin and integri
- CVE-2017-1309IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user.
- CVE-2017-1224IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive info