IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-5940IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting.
- CVE-2016-5938IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.
- CVE-2016-5881IBM iNotes is vulnerable to cross-site scripting.
- CVE-2016-2992IBM Infosphere BigInsights is vulnerable to cross-site scripting.
- CVE-2016-2942IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause
- CVE-2016-2941IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could b
- CVE-2016-2924IBM Infosphere BigInsights is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.
- CVE-2016-0320IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users e
- CVE-2016-0218IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to cross-site scripting, caused by improper validation of user-supp
- CVE-2016-0217IBM Cognos Business Intelligence and IBM Cognos Analytics are vulnerable to stored cross-site scripting, caused by improper validation of us
- CVE-2016-8967IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.
- CVE-2016-6117IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 can be deployed with active debugging code that can disclose sensitive information.
- CVE-2016-6105IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonym
- CVE-2016-0371The Tivoli Storage Manager (TSM) password may be displayed in plain text via application trace output while application tracing is enabled.
- CVE-2016-9731IBM Business Process Manager is vulnerable to cross-site scripting.
- CVE-2016-8981IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.
- CVE-2016-8980IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML dat
- CVE-2016-8966IBM BigFix Inventory v9 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict
- CVE-2016-8961IBM BigFix Inventory v9 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2016-8943IBM Tivoli Storage Productivity Center is vulnerable to cross-site scripting.
- CVE-2016-8942IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of prop
- CVE-2016-8941IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and un
- CVE-2016-8936IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting.
- CVE-2016-8934IBM WebSphere Application Server is vulnerable to cross-site scripting.
- CVE-2016-8922Exphox WebRadar is vulnerable to cross-site scripting.
- CVE-2016-8921IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code o
- CVE-2016-8920IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting.
- CVE-2016-8918IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials.
- CVE-2016-8913IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system.
- CVE-2016-8912IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 stores potentially sensitive information in in log files that could be read by an authenticat