Vulnerabilities in IBM

6,267 results
CVE-2017-1356—IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements,EPSS 1.4%CVE-2017-1606—IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is vulnerable to SQL injection. A remote attacker coEPSS 1.4%CVE-2017-1236—IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquEPSS 1.4%CVE-2018-1391—IBM Financial Transaction Manager 3.0.4 and 3.1.0 for ACH Services for Multi-Platform could allow an authenticated user to execute a specialEPSS 1.4%CVE-2021-39064MEDIUMIBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials EPSS 1.4%CVE-2019-4672MEDIUMIBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requestsEPSS 1.4%CVE-2019-4600MEDIUMIBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IEPSS 1.4%CVE-2020-4531MEDIUMIBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obEPSS 1.4%CVE-2021-20470MEDIUMIBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackEPSS 1.4%CVE-2019-4103HIGHIBM Tivoli Netcool/Impact 7.1.0 allows for remote execution of command by low privileged User. Remote code execution allow to execute arbitrEPSS 1.4%CVE-2022-31768MEDIUMIBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which EPSS 1.4%CVE-2017-1227—IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906.EPSS 1.4%CVE-2018-1773MEDIUMIBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the inEPSS 1.4%CVE-2020-4341LOWIBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is retEPSS 1.4%CVE-2024-51464MEDIUMIBM i authentication bypassEPSS 1.4%CVE-2017-1210—IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an unauthenticated attacker to inject data into log files mEPSS 1.4%CVE-2023-24960HIGHIBM InfoSphere Information Server information disclosureEPSS 1.4%CVE-2017-1477—IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remoteEPSS 1.4%CVE-2019-4069HIGHIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious EPSS 1.4%CVE-2023-32336HIGHIBM InfoSphere Information Server code executionEPSS 1.4%