Skip to contentIbm I vulnerabilities
- ibm spectrum protect client, spectrum protect for space management +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer...CVE-2021-205466.2 Medium
- ibm spectrum protect for virtual environments, spectrum protect backup-archive client +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their...CVE-2021-205327.4 High
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by...CVE-2020-45625.3 Medium
- ibm iIBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local...CVE-2021-205015.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...CVE-2021-204548.2 High
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...CVE-2021-204538.2 High
- ibm resilient, resilient onprem +1 moreIBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that...CVE-2021-205276.0 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205195.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow...CVE-2020-49655.9 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products contain an undisclosed vulnerability that could allow an...CVE-2020-49644.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability...CVE-2020-49206.4 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery ...CVE-2021-204804.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability...CVE-2020-49975.4 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...CVE-2020-47925.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205205.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205185.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205065.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205045.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205035.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when...CVE-2021-205027.1 High
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-204475.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-203525.4 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity...CVE-2021-204827.1 High
- ibm elastic storage server, elastic storage system +1 moreIBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3...CVE-2020-50157.5 High
- ibm planning analyticsIBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by...CVE-2020-48826.1 Medium
- ibm resilient, soar +1 moreIBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to...CVE-2020-46353.7 Low
- ibm api connectIBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member...CVE-2021-204406.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the...CVE-2020-41845.8 Medium
- ibm tivoli netcool/omnibus gui, tivoli netcool\/omnibus webgui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This...CVE-2021-203366.4 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-50258.4 High
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-50247.5 High
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-49765.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...CVE-2020-50165.3 Medium
- ibm cloud pak for multicloud management monitoringIBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information...CVE-2021-203415.3 Medium
- ibm api connectIBM API Connect V10 and V2018 could allow an attacker who has intercepted a registration...CVE-2020-49034.8 Medium
- ibm api connectIBM API Connect V10 is impacted by insecure communications during database replication. As the...CVE-2020-46955.9 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...CVE-2021-203515.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...CVE-2021-203505.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...CVE-2021-203405.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...CVE-2020-49755.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users...CVE-2020-48665.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...CVE-2020-48636.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...CVE-2020-48576.4 Medium
- ibm doors next, engineering lifecycle optimization, engineering test management +7 more +9 moreIBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows...CVE-2020-48566.4 Medium
- ibm security verify bridgeIBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic...CVE-2021-204425.9 Medium
- ibm security verify bridgeIBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an...CVE-2021-204415.9 Medium
- ibm cloud apm, cloud application performance management +1 moreThe IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored...CVE-2020-47264.0 Medium
- ibm cloud apm, cloud application performance management +1 moreIBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by...CVE-2020-47254.3 Medium
- ibm cloud apm, cloud application performance management +1 moreThe IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the...CVE-2020-47194.9 Medium
- ibm mq, mq appliance +1 moreIBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a...CVE-2020-49316.5 Medium
- Show moreLoading…