IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2016-3024IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system.
- CVE-2016-3023IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file nam
- CVE-2016-3022IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file p
- CVE-2016-3021IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a special
- CVE-2016-3018IBM Security Access Manager for Web is vulnerable to cross-site scripting.
- CVE-2016-3017IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations.
- CVE-2016-3016IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integri
- CVE-2016-2987An undisclosed vulnerability in CLM applications may result in some administrative deployment parameters being shown to an attacker.
- CVE-2016-2939IBM iNotes is vulnerable to cross-site scripting.
- CVE-2016-2908IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error wh
- CVE-2016-0396IBM Tivoli Endpoint Manager could allow a user under special circumstances to inject commands that would be executed with unnecessary higher
- CVE-2016-0394IBM Integration Bus and WebSphere Message broker sets incorrect permissions for an object that could allow a local attacker to manipulate ce
- CVE-2016-0297IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) could allow a remote attacker to obtain sensitive information due to a missing
- CVE-2016-0296IBM Tivoli Endpoint Manager - Mobile Device Management (MDM) stores potentially sensitive information in log files that could be available t
- CVE-2016-0265IBM Campaign is vulnerable to cross-site scripting, caused by improper validation of user-supplied input.