IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-3038IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting.
- CVE-2016-3037IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key.
- CVE-2016-3036IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets.
- CVE-2016-0228IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various s
- CVE-2017-1205IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root acces
- CVE-2017-1152IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obta
- CVE-2016-8927IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting.
- CVE-2016-8926IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restric
- CVE-2016-8925IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow
- CVE-2017-1180The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access
- CVE-2016-6100IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite
- CVE-2016-3031IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- CVE-2016-3015IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
- CVE-2017-1171The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application
- CVE-2017-1154IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which s
- CVE-2016-9990IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2016-9707IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.
- CVE-2016-8935IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting.
- CVE-2016-8917IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and u
- CVE-2016-6111IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) erro
- CVE-2016-6036IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.
- CVE-2016-6031IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.
- CVE-2016-6022IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting.
- CVE-2017-1153IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do n
- CVE-2017-1143IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to proper
- CVE-2017-1142IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set th
- CVE-2017-1120IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2016-9737IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting.
- CVE-2016-8960IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege u
- CVE-2016-6102IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters.