Skip to contentIbm I vulnerabilities
- ibm curam social program management, curam spm +1 moreAn XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program...CVE-2020-47727.1 High
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...CVE-2020-46995.3 Medium
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...CVE-2020-46615.3 Medium
- ibm security access manager, security verify access +1 moreIBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker...CVE-2020-46605.3 Medium
- ibm informix dynamic serverIBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due...CVE-2020-47997.8 High
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the...CVE-2020-4280EPSS 68.5%6.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM 7.3 and 7.4 when configured to use Active Directory Authentication may be...CVE-2019-45457.5 High
- ibm security access manager appliance, security access manager +1 moreIBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This...CVE-2019-47256.1 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow an attacker to bypass authentication and...CVE-2020-44939.8 Critical
- ibm websphere application serverIBM WebSphere Application Server 7.5, 8.0, 8.5, and 9.0 traditional could allow a remote attacker...CVE-2020-45765.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized...CVE-2020-46292.9 Low
- ibm security verify privilege vault remote, security verify privilege vault remote on-premises +1 moreIBM Security Secret Server (IBM Security Verify Privilege Vault Remote 1.2 ) could allow a local...CVE-2020-46073.3 Low
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking...CVE-2020-47276.1 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5,...CVE-2020-45315.3 Medium
- ibm security secret serverIBM Security Secret Server prior to 10.9 could allow an attacker to bypass SSL security due to...CVE-2020-43403.1 Low
- ibm security secret serverIBM Security Secret Server proir to 10.9 could allow a remote attacker to bypass security...CVE-2020-43243.5 Low
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 contains hard-coded credentials, such as a password or...CVE-2020-46225.9 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges...CVE-2020-46218.8 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow a remote authenticated attacker to upload...CVE-2020-46208.8 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 stores user credentials in plain in clear text which can be...CVE-2020-46195.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow a privileged user to cause a denial of service due...CVE-2020-46185.5 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site request forgery which could allow...CVE-2020-46177.1 High
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker...CVE-2020-46165.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability...CVE-2020-46155.4 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...CVE-2020-46143.7 Low
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 uses weaker than expected cryptographic algorithms that could...CVE-2020-46135.9 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to obtain sensitive...CVE-2020-46124.3 Medium
- ibm data risk managerIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to bypass security and...CVE-2020-46118.8 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity...CVE-2020-46437.5 High
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or...CVE-2020-45905.3 Medium
- ibm business automation content analyzer on cloudIBM Business Automation Content Analyzer on Cloud 1.0 does not set the secure attribute on...CVE-2020-43154.3 Medium
- ibm security trusteer pinpoint detectIBM Security Trusteer Pinpoint Detect 11.6.5 could disclose some information due to using a...CVE-2020-47083.7 Low
- ibm maximo asset management, control desk, maximo asset configuration manager +17 more +19 moreIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote attacker to conduct phishing...CVE-2020-44096.8 Medium
- lenovo integrated management module 2, ibm system x imm2 firmware, lenovo system x imm2 firmware for x240 m5, machine types: 9532, 2591 +1 more +3 moreA cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x...CVE-2020-83406.3 Medium
- ibm bladecenter amm firmware, bladecenter advanced management module firmware +1 moreA cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter...CVE-2020-83394.3 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are...CVE-2020-45305.4 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site request forgery which...CVE-2020-45264.3 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 could allow a remote authenticated attacker to...CVE-2020-45218.8 High
- ibm tivoli business service managerIBM Tivoli Business Service Manager 6.2.0.0 - 6.2.0.2 IF 1 allows web pages to be stored locally...CVE-2020-43444.0 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to SQL injection. A remote attacker...CVE-2019-46716.3 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting....CVE-2020-45785.4 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0...CVE-2020-46986.4 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0...CVE-2020-45165.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This...CVE-2020-47026.4 Medium
- ibm infosphere metadata asset manager, infosphere information server +1 moreIBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By...CVE-2020-46325.7 Medium
- ibm api connectIBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege...CVE-2020-46387.2 High
- ibm api connectIBM API Connect 2018.4.1.0 through 2018.4.1.12 could allow an attacker to launch phishing attacks...CVE-2020-43376.5 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may...CVE-2020-46939.1 Critical
- ibm doors next, engineering workflow management, engineering requirements management doors next +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...CVE-2020-45465.4 Medium
- ibm doors next, engineering workflow management, engineering requirements management doors next +8 more +10 moreIBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This...CVE-2020-45225.4 Medium
- Show moreLoading…