IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-8911IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim.
- CVE-2016-6126IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system.
- CVE-2016-6125IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting.
- CVE-2016-6124IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to ex
- CVE-2016-6123IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting.
- CVE-2016-6122IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users.
- CVE-2016-6113IBM Verse is vulnerable to cross-site scripting.
- CVE-2016-6090IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized a
- CVE-2016-6085IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers.
- CVE-2016-6084IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request.
- CVE-2016-6082IBM BigFix Platform could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free race condition.
- CVE-2016-6080The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker.
- CVE-2016-6072IBM Maximo Asset Management is vulnerable to cross-site scripting.
- CVE-2016-6065IBM Security Guardium Database Activity Monitor appliance could allow a local user to inject commands that would be executed as root.
- CVE-2016-6061IBM Jazz Foundation is vulnerable to cross-site scripting.
- CVE-2016-6059IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processi
- CVE-2016-6054IBM Jazz Foundation is vulnerable to cross-site scripting.
- CVE-2016-6047IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting.
- CVE-2016-6046IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site scripting.
- CVE-2016-6045IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious
- CVE-2016-6044IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which ma
- CVE-2016-6043Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not bei
- CVE-2016-6042IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects
- CVE-2016-6040IBM Jazz Foundation could allow an authenticated user to take over a previously logged in user due to session expiration not being enforced.
- CVE-2016-6039IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting.
- CVE-2016-6034IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of pr
- CVE-2016-6030IBM Jazz Foundation is vulnerable to cross-site scripting.
- CVE-2016-6028IBM Jazz technology based products might allow an attacker to view work item titles that they do not have privilege to view.
- CVE-2016-6020IBM Sterling B2B Integrator Standard Edition could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
- CVE-2016-6000IBM TRIRIGA Application Platform is vulnerable to cross-site scripting.