IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2017-1093IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges.
- CVE-2016-6116IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properl
- CVE-2016-6103IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious
- CVE-2016-6099IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 discloses sensitive information to unauthorized users.
- CVE-2016-6095IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 uses an inadequate account lockout setting that could allow a remote attacker to brute force ac
- CVE-2016-5935IBM Jazz for Service Management could allow a remote attacker to obtain sensitive information, caused by the failure to properly validate th
- CVE-2016-9739IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user.
- CVE-2016-9704IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting.
- CVE-2016-9703IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical acce
- CVE-2016-9008IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent.
- CVE-2016-9000IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection.
- CVE-2016-8999IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attackers to render a page in quirks
- CVE-2016-8982IBM InfoSphere Information Server stores sensitive information in URL parameters.
- CVE-2016-8977IBM BigFix Inventory v9 could disclose sensitive information to an unauthorized user using HTTP GET requests.
- CVE-2016-8963IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.
- CVE-2016-8938IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server.
- CVE-2016-8933IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system.
- CVE-2016-8932IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on
- CVE-2016-8931IBM Kenexa LMS on Cloud could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on
- CVE-2016-8930IBM Kenexa LMS on Cloud is vulnerable to SQL injection.
- CVE-2016-8929IBM Kenexa LMS on Cloud is vulnerable to SQL injection.
- CVE-2016-8928IBM Kenexa LMS on Cloud is vulnerable to SQL injection.
- CVE-2016-8919IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to r
- CVE-2016-6115IBM General Parallel File System is vulnerable to a buffer overflow.
- CVE-2016-6110IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.
- CVE-2016-6068IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role prop
- CVE-2016-6001IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for
- CVE-2016-5953IBM Sterling Order Management transmits the session identifier within the URL.
- CVE-2016-5942IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting.
- CVE-2016-5941IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system.