Vulnerabilities in IBM

6,267 results
CVE-2017-1613—IBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or unauthorized access to non-sensitive EngagemenEPSS 1.5%CVE-2021-20373MEDIUMIBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstEPSS 1.5%CVE-2017-1264—IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead to exposure of resourcEPSS 1.5%CVE-2020-4509HIGHIBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker couldEPSS 1.5%CVE-2023-29257HIGHIBM Db2 code executionEPSS 1.5%CVE-2021-29873HIGHIBM Flash System 900 could allow an authenticated attacker to obtain sensitive information and cause a denial of service due to a restrictedEPSS 1.5%CVE-2019-4131MEDIUMIBM Application Performance Management (IBM Monitoring 8.1.4) could allow a remote attacker to induce the application to perform server-sideEPSS 1.5%CVE-2021-38872MEDIUMIBM DataPower Gateway 10.0.2.0, 10.0.3.0, 10.0.1.0 through 10.0.1.4, and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause aEPSS 1.5%CVE-2017-1539—IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group membershiEPSS 1.5%CVE-2020-4994MEDIUMIBM DataPower Gateway 10.0.1.0 through 10.0.1.4 and 2018.4.1.0 through 2018.4.1.17 could allow a remote user to cause a temporary denial of EPSS 1.5%CVE-2020-4921HIGHIBM Security Guardium 10.6 and 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which couEPSS 1.5%CVE-2020-4839MEDIUMIBM Host firmware for LC-class Systems is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A remote privilegEPSS 1.5%CVE-2017-1149—IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error whEPSS 1.5%CVE-2017-1541—A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy fiEPSS 1.5%CVE-2018-1414—IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, whichEPSS 1.5%CVE-2017-1174—IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemenEPSS 1.5%CVE-2022-22487MEDIUMAn IBM Spectrum Protect storage agent could allow a remote attacker to perform a brute force attack by allowing unlimited attempts to login EPSS 1.5%CVE-2017-1311—IBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which EPSS 1.5%CVE-2018-1736HIGHIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By perEPSS 1.5%CVE-2019-4135HIGHIBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate EPSS 1.5%