CVEs published in January 2016
725 vulnerabilities, 69 critical, 4 exploited.
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +5 more +7 moreJazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.x...6.8 Medium
- ibm maximo asset management, smartcloud control desk, maximo asset management essentials +6 more +8 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.5 before 7.5.0.9 IF2...5.4 Medium
- ibm installation manager, packaging utility +1 moreconsoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging...7.0 High
- ibm spectrum protect for virtual environments, spectrum protect snapshot +1 moreThe Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual...8.5 High
- ibm curam social program managementCross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1...5.4 Medium
- ibm infosphere biginsightsThe Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote...4.3 Medium
- ibm security access manager 9.0 firmware, security access manager for web 7.0 firmware, security access manager for web 8.0 firmware +2 moreIBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security...8.0 High
- ibm rational clearquestIBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows...5.1 Medium
- ibm tealeaf customer experienceThe portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9...4.0 Medium
- ibm tealeaf customer experienceThe portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9...3.7 Low
- pcre, fedoraproject fedora, oracle solaris +1 more +3 moreThe pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\")...9.8 Critical
- ibm spectrum scaleIBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to...6.5 Medium
- ibm qradar security information and event managerCross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows...5.4 Medium
- ibm b2b advanced communications, multi-enterprise integration gateway +1 moreIBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x...4.3 Medium
- ibm mq appliance m2000Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote...3.7 Low
- ibm mq appliance m2000Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote...3.7 Low
- ibm urbancode deployMultiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12,...5.4 Medium
- ibm sterling b2b integratorThe Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in...7.4 High
- ibm openpages grc platformSQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7...5.4 Medium
- ibm websphere mq lightIBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service ...5.3 Medium
- ibm websphere mq lightIBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows...5.3 Medium
- spi-inc ganetiThe RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2...7.5 High
- spi-inc ganetiThe RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2...7.5 High
- ibm spss statisticsIBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone:...7.8 High
- ibm business process manager, websphere process server +1 moreRemote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager...6.8 Medium