Vulnerabilities in IBM

6,267 results
CVE-2020-4771MEDIUMIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitiEPSS 1.6%CVE-2017-1698—IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks agaiEPSS 1.6%CVE-2019-4614MEDIUMIBM MQ and IBM MQ Appliance 8.0 and 9.0 LTS client connecting to a Queue Manager could cause a SIGSEGV denial of service caused by convertinEPSS 1.6%CVE-2022-33165MEDIUMIBM Security Directory Server information disclosureEPSS 1.6%CVE-2019-4062HIGHIBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dEPSS 1.6%CVE-2017-1752—IBM UrbanCode Deploy 6.1 and 6.2 could allow an authenticated privileged user to obtain highly sensitive information. IBM X-Force ID: 135547EPSS 1.6%CVE-2018-1675MEDIUMIBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could expose password hashes in stored in system memory on target systems EPSS 1.6%CVE-2026-18729HIGHLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementEPSS 1.6%CVE-2026-19295CRITICALLangflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcementEPSS 1.6%CVE-2019-4032MEDIUMIBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could sendEPSS 1.6%CVE-2018-1994MEDIUMIBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statementEPSS 1.6%CVE-2020-4163MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a malicioEPSS 1.6%CVE-2026-14959CRITICALOS Command Injection in IBM Aspera FaspexEPSS 1.6%CVE-2021-20502HIGHIBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker couEPSS 1.6%CVE-2020-4723HIGHIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.EPSS 1.5%CVE-2020-4721HIGHIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.EPSS 1.5%CVE-2020-4724HIGHIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.EPSS 1.5%CVE-2020-4722HIGHIBM i2 Analyst Notebook 9.2.0 and 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption.EPSS 1.5%CVE-2020-4375MEDIUMIBM MQ, IBM MQ Appliance, IBM MQ for HPE NonStop 8.0, 9.1 CD, and 9.1 LTS could allow an attacker to cause a denial of service due to a memoEPSS 1.5%CVE-2017-1308—IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated attacker to download files they should not hEPSS 1.5%