Skip to contentIbm vulnerabilities
Products
Show 140 moreShow less
Newest
- ibm openbmc, hmc, power hardware management console \(7063-cr2\) firmware +2 more +4 moreIBM OPENBMC OP920, OP930, and OP940 could allow an unauthenticated user to obtain sensitive...CVE-2021-389605.3 Medium
- ibm guardium data encryption, security guardium data encryption +1 moreIBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under...CVE-2021-390213.7 Low
- ibm security verify access, security verify access docker +1 moreIBM Security Verify Access 10.0.0.0, 10.0.1.0 and 10.0.2.0 with the advanced access control...CVE-2021-390709.8 Critical
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 does not invalidate session any existing session...CVE-2021-390666.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site request forgery which could...CVE-2021-390444.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow an authenticated user to obtain sensitive...CVE-2021-298462.2 Low
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow an authenticated user to perform unauthorized...CVE-2021-298454.3 Medium
- ibm security guardium insightsIBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information,...CVE-2021-298385.9 Medium
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote...CVE-2021-390317.5 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security...CVE-2020-48797.3 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized...CVE-2020-48777.3 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity...CVE-2020-48767.1 High
- ibm cognos controllerIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity...CVE-2020-48757.1 High
- ibm security soar, soar +1 moreIBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information,...CVE-2021-297855.9 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than...CVE-2022-223104.8 Medium
- ibm cloud pak for automationIBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is...CVE-2021-298725.4 Medium
- ibm filenet content managerIBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker...CVE-2021-389656.3 Medium
- ibm sterling gentran:server for microsoft windows, sterling gentran +1 moreIBM Sterling Gentran:Server for Microsoft Windows 5.3 stores potentially sensitive information in...CVE-2021-390324.0 Medium
- ibm iThe IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote...CVE-2021-390566.5 Medium
- ibm aix, vios +1 moreIBM AIX 7.0, 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a...CVE-2021-389918.4 High
- ibm engineering workflow management, rational team concert +1 moreIBM Engineering Workflow Management 7.0, 7.0.1, and 7.0.2 as well as IBM Rational Team Concert 6...CVE-2021-297014.3 Medium
- ibm aix, vios +1 moreIBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability...CVE-2021-389908.4 High
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive information due to...CVE-2021-389573.1 Low
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could disclose sensitive version information...CVE-2021-389565.3 Medium
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 uses weaker than expected cryptographic...CVE-2021-389215.9 Medium
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 is vulnerable to cross-site scripting. This...CVE-2021-388953.0 Low
- ibm security verify accessIBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 could allow a remote attacker to obtain...CVE-2021-388942.7 Low
- ibm powervm hypervisorIBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM...CVE-2021-389188.6 High
- ibm iIBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to...CVE-2021-388766.1 Medium
- ibm openbmc, power system ac922 \(8335-gtc\) firmware, power system ac922 \(8335-gtg\) firmware +1 more +3 moreIBM OPENBMC OP910 is vulnerable to cross-site scripting. This vulnerability allows users to embed...CVE-2021-389616.1 Medium
- ibm cloud pak for securityIBM Cloud Pak for Security (CP4S) 1.7.2.0, 1.7.1.0, and 1.7.0.0 could allow an authenticated user...CVE-2021-390134.3 Medium
- ibm cloud pak for automation, workflow process service +1 moreIBM Cloud Pak for Automation 21.0.2 is vulnerable to cross-site scripting. This vulnerability...CVE-2021-389665.4 Medium
- ibm business automation workflow, business process manager, cloud pak for automation +1 more +3 moreIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...CVE-2021-389004.9 Medium
- ibm business automation workflow, business process manager, business process manager standard +2 more +4 moreIBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0...CVE-2021-388936.4 Medium
- ibm business automation workflow, business process manager +1 moreIBM Business Automation Workflow 18.0, 19.0, 20,0 and 21.0 and IBM Business Process Manager 8.5...CVE-2021-388835.4 Medium
- ibm power system s821lc server (8001-12c), power hardware management console \(7063-cr1\) firmware, power system cs821lc \(8005-12n\) firmware +3 more +5 moreBMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow...CVE-2021-298475.3 Medium
- ibm mq for hpe nonstopIBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when...CVE-2021-389507.4 High
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x uses Cross-Origin Resource Sharing (CORS)...CVE-2021-390636.5 Medium
- ibm spectrum protect plusIBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x is vulnerable to server-side request forgery ...CVE-2021-390574.2 Medium
- ibm i2 analyst's notebook, i2 analysts notebook +1 moreIBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow,...CVE-2021-390505.3 Medium
- ibm i2 analyst's notebook, i2 analysts notebook +1 moreIBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow,...CVE-2021-390495.3 Medium
- ibm spectrum protect, spectrum protect backup-archive client, spectrum protect for space management +2 moreIBM Spectrum Protect Client 7.1 and 8.1 is vulnerable to a stack based buffer overflow, caused by...CVE-2021-390486.2 Medium
- ibm spectrum protect operations centerIBM Spectrum Protect Operations Center 7.1, under special configurations, could allow a local...CVE-2021-389015.1 Medium
- ibm spectrum protect plusThe IBM Spectrum Protect Plus 10.1.0.0 through 10.1.8.x server connection to an IBM Spectrum...CVE-2020-44966.8 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute...CVE-2021-390658.1 High
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules...CVE-2021-390645.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier uses weaker than expected cryptographic...CVE-2021-390585.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to hijack the...CVE-2021-390545.4 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain...CVE-2021-390535.9 Medium
- ibm spectrum copy data managementIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the...CVE-2021-390525.6 Medium
- Show moreLoading…