IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-9994IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.
- CVE-2016-9993IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.
- CVE-2016-9992IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection.
- CVE-2016-5932IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting.
- CVE-2016-2880IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user.
- CVE-2016-2879IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credent
- CVE-2016-9975IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malic
- CVE-2016-9009IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clusteri
- CVE-2016-8998IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a
- CVE-2016-8974IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processin
- CVE-2016-6055IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
- CVE-2016-5883IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.
- CVE-2016-8986IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager to bring down MQ channels using specially crafted HT
- CVE-2016-8915IBM WebSphere MQ 8.0 could allow an authenticated user with access to the queue manager and queue, to deny service to other channels running
- CVE-2016-3052Under non-standard configurations, IBM WebSphere MQ might send password data in clear text over the network.
- CVE-2016-3013IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling.
- CVE-2016-6062IBM Resilient v26.0, v26.1, and v26.2 is vulnerable to cross-site scripting.
- CVE-2016-5919IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker
- CVE-2016-9706IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Ent
- CVE-2016-9010IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2016-8972IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the bellmail client.
- CVE-2016-8968IBM Jazz Foundation is vulnerable to cross-site scripting.
- CVE-2016-8944IBM AIX 7.1 and 7.2 allows a local user to open a file with a specially crafted argument that would crash the system.
- CVE-2016-6079IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level priv
- CVE-2016-6077IBM Cognos Disclosure Management 10.2 could allow a malicious attacker to execute commands as a lower privileged user that opens a malicious
- CVE-2016-6060An undisclosed vulnerability in IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 could allow a JazzGuest user to see project names.
- CVE-2016-6033IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker t
- CVE-2016-0360IBM Websphere MQ JMS 7.0.1, 7.1, 7.5, 8.0, and 9.0 client provides classes that deserialize objects from untrusted sources which could allow
- CVE-2017-1121IBM WebSphere Application Server 7.0, 8.0, and 9.0 is vulnerable to cross-site scripting.
- CVE-2016-9005IBM System Storage TS3100-TS3200 Tape Library could allow an unauthenticated user with access to the company network, to change a user's pas