IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-5994IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and
- CVE-2016-5990IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automaticall
- CVE-2016-5988IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be av
- CVE-2016-5985The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled.
- CVE-2016-5984IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection.
- CVE-2016-5980IBM TRIRIGA Application Platform is vulnerable to cross-site scripting.
- CVE-2016-5966IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the fail
- CVE-2016-5964IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remot
- CVE-2016-5958IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the sec
- CVE-2016-5952IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection.
- CVE-2016-5951IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting.
- CVE-2016-5950IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user.
- CVE-2016-5949IBM Kenexa LCMS Premier on Cloud could allow an authenticated user to obtain sensitive user data with a specially crafted HTTP request.
- CVE-2016-5948IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site scripting.
- CVE-2016-5939IBM Kenexa LMS on Cloud is vulnerable to SQL injection.
- CVE-2016-5937IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthor
- CVE-2016-5899IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting.
- CVE-2016-5898IBM Jazz Reporting Service (JRS) could allow a remote attacker to obtain sensitive information, caused by not restricting JSON serialization
- CVE-2016-5897IBM Jazz Reporting Service (JRS) is vulnerable to HTML injection.
- CVE-2016-5896IBM Maximo Asset Management could disclose sensitive information from a stack trace after submitting incorrect login onto Cognos browser.
- CVE-2016-5882IBM iNotes is vulnerable to cross-site scripting.
- CVE-2016-5880IBM iNotes is vulnerable to cross-site scripting.
- CVE-2016-3053IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privileges.
- CVE-2016-3046IBM Security Access Manager for Web is vulnerable to SQL injection.
- CVE-2016-3045IBM Security Access Manager for Web stores sensitive information in URL parameters.
- CVE-2016-3043IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable
- CVE-2016-3035IBM AppScan Source could reveal some sensitive information through the browsing of testlinks on the server.
- CVE-2016-3034IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt i
- CVE-2016-3029IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unaut
- CVE-2016-3027IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when proces