IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-6056IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting.
- CVE-2017-1155IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to another user's reports using a special
- CVE-2017-1151IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI)
- CVE-2017-1146IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting.
- CVE-2017-1145IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a deni
- CVE-2017-1134IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access.
- CVE-2016-9697An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack.
- CVE-2016-9696IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection.
- CVE-2016-9694IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2016-8973IBM Rhapsody DM 4.0, 5.0 and 6.0 contains an undisclosed vulnerability that may allow an authenticated user to upload infected malicious fil
- CVE-2016-2981An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials.
- CVE-2017-1150IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialize
- CVE-2016-9985IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user.
- CVE-2016-9006IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting.
- CVE-2016-5933IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall
- CVE-2016-5894IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability.
- CVE-2017-1133IBM QRadar 7.2 is vulnerable to cross-site scripting.
- CVE-2017-1124IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection.
- CVE-2016-9740IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of re
- CVE-2016-9730IBM QRadar Incident Forensics 7.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unautho
- CVE-2016-9729IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protecte
- CVE-2016-9728IBM Qradar 7.2 is vulnerable to SQL injection.
- CVE-2016-9727IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system.
- CVE-2016-9725IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request res
- CVE-2016-9724IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.
- CVE-2016-9723IBM QRadar 7.2 is vulnerable to cross-site scripting.
- CVE-2016-9720IBM QRadar 7.2 discloses sensitive information to unauthorized users.
- CVE-2016-9693IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks.
- CVE-2016-8971IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in th
- CVE-2016-8940IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries.