IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1349IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local u
- CVE-2017-1348IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting.
- CVE-2017-1347IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection.
- CVE-2017-1302IBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive information due to improper access controls.
- CVE-2017-1193IBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information using an HTTP GET request.
- CVE-2017-1132IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting.
- CVE-2017-1131IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information by using unsupported, spe
- CVE-2016-5893IBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2017-1326IBM Sterling File Gateway does not properly restrict user requests based on permission level.
- CVE-2016-9983IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should no
- CVE-2016-9982IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due
- CVE-2016-9747IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1304IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) durin
- CVE-2017-1117IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled.
- CVE-2017-1379IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the Develo
- CVE-2017-1197IBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could allow a remote attacker to brute force acco
- CVE-2017-1104IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1102IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1101IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1100IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1099IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions.
- CVE-2016-9984IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administr
- CVE-2016-9973IBM Jazz Foundation is vulnerable to cross-site scripting.
- CVE-2017-1278IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection.
- CVE-2017-1276IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1247IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
- CVE-2017-1214IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disc
- CVE-2017-1319IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie
- CVE-2017-1179IBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sen
- CVE-2017-1140IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting.