Skip to contentIbm vulnerabilities
Products
Show 140 moreShow less
Newest
- ibm spectrum scaleIBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files...CVE-2020-49814.4 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic...CVE-2021-296945.9 Medium
- ibm spectrum protect client, spectrum protect for space management +1 moreIBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer...CVE-2021-296728.4 High
- ibm spectrum protect client, spectrum protect for space management +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer...CVE-2021-205466.2 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive...CVE-2021-205366.2 Medium
- ibm spectrum protect for virtual environments, spectrum protect backup-archive client +1 moreIBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their...CVE-2021-205327.4 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which...CVE-2021-204326.5 Medium
- ibm planning analyticsIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by...CVE-2020-45625.3 Medium
- ibm http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...CVE-2021-23155.4 Medium
- ibm iIBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local...CVE-2021-205015.9 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...CVE-2021-204548.2 High
- ibm websphere application serverIBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity...CVE-2021-204538.2 High
- ibm resilient, resilient onprem +1 moreIBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that...CVE-2021-205276.0 Medium
- ibm spectrum protect server, spectrum protect +1 moreIBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by...CVE-2021-204914.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205195.4 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow...CVE-2020-49655.9 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products contain an undisclosed vulnerability that could allow an...CVE-2020-49644.3 Medium
- ibm collaborative lifecycle management, doors next, engineering lifecycle optimization +13 more +15 moreIBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability...CVE-2020-49206.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging...CVE-2021-296714.0 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery ...CVE-2021-204804.3 Medium
- ibm infosphere information serverIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability...CVE-2020-49975.4 Medium
- aveva edge, ibm edge application manager +1 moreIBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed...CVE-2020-47925.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205205.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205185.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205065.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205045.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-205035.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when...CVE-2021-205027.1 High
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-204475.4 Medium
- ibm engineering lifecycle optimization, engineering workflow management, engineering insights +4 more +6 moreIBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows...CVE-2021-203525.4 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity...CVE-2021-204827.1 High
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1...CVE-2020-49445.1 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in...CVE-2020-48846.2 Medium
- ibm urbancode deployIBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to...CVE-2020-48485.4 Medium
- ibm elastic storage server, elastic storage system +1 moreIBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3...CVE-2020-50157.5 High
- ibm planning analyticsIBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by...CVE-2020-48826.1 Medium
- ibm resilient, soar +1 moreIBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to...CVE-2020-46353.7 Low
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 uses an inadequate account...CVE-2020-48916.2 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user with...CVE-2020-48904.4 Medium
- ibm spectrum scaleIBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to...CVE-2020-48514.0 Medium
- ibm api connectIBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member...CVE-2021-204406.4 Medium
- ibm security guardiumIBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the...CVE-2020-41845.8 Medium
- ibm datapower gatewayIBM DataPower Gateway 10.0.0.0 through 10.0.1.0 uses weaker than expected cryptographic...CVE-2020-48315.9 Medium
- ibm tivoli netcool/omnibus gui, tivoli netcool\/omnibus webgui +1 moreIBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This...CVE-2021-203366.4 Medium
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-50258.4 High
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-50247.5 High
- ibm db2, db2 for linux, unix and windows, netapp oncommand insight +2 moreIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...CVE-2020-49765.1 Medium
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse...CVE-2020-50165.3 Medium
- ibm spss modelerA vulnerability exists in IBM SPSS Modeler Subscription Installer that allows a user with create...CVE-2020-47176.2 Medium
- ibm cloud pak for multicloud management monitoringIBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information...CVE-2021-203415.3 Medium
- Show moreLoading…