Vulnerabilities in IBM

6,267 results
CVE-2022-35643CRITICALIBM PowerVM VIOS 3.1 could allow a remote attacker to tamper with system configuration or cause a denial of service. IBM X-Force ID: 230956.EPSS 1.4%CVE-2018-1767MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Cachemonitor is vulnerable to cross-site scripting. This vulnerability allows users EPSS 1.4%CVE-2018-1794MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using OAuth ear is vulnerable to cross-site scripting. This vulnerability allows useEPSS 1.4%CVE-2021-39056MEDIUMThe IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user to send a specially craEPSS 1.4%CVE-2018-1793MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using SAML ear is vulnerable to cross-site scripting. This vulnerability allows userEPSS 1.4%CVE-2023-30448MEDIUMIBM Db2 denial of serviceEPSS 1.4%CVE-2020-4466MEDIUMIBM MQ for HPE NonStop 8.0.4 and 8.1.0 could allow a remote authenticated attacker could cause a denial of service due to an error within thEPSS 1.4%CVE-2023-25925HIGHIBM Security Guardium Key Lifecycle Manager command injectionEPSS 1.4%CVE-2017-1268MEDIUMIBM Security Guardium 10 and 10.5 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but EPSS 1.3%CVE-2020-4621HIGHIBM Data Risk Manager (iDNA) 2.0.6 could allow an authenticated user to escalate their privileges to administrator due to insufficient authoEPSS 1.3%CVE-2021-29842LOWIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 21.0.0.9 could allow a remote user to enumerate usernames dEPSS 1.3%CVE-2019-4592HIGHIBM Tivoli Monitoring Service 6.3.0.7.3 through 6.3.0.7.10 could allow an unauthorized user to access and modify operation aspects of the ITEPSS 1.3%CVE-2021-20427MEDIUMIBM Security Guardium 11.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.EPSS 1.3%CVE-2020-4217HIGHThe IBM Spectrum Scale 4.2 and 5.0 file system component is affected by a denial of service security vulnerability. An attacker can force thEPSS 1.3%CVE-2023-27874CRITICALIBM Aspera Faspex XML external entity injectionEPSS 1.3%CVE-2018-1420MEDIUMIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 resets access control settings to the out of the box configuration during Combined Cumulative FiEPSS 1.3%CVE-2020-4284MEDIUMIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, and 1.0.5 could disclose sensitive information to an unauthorized uEPSS 1.3%CVE-2018-1374MEDIUMAn IBM WebSphere MQ (Maintenance levels 7.1.0.0 - 7.1.0.9, 7.5.0.0 - 7.5.0.8, 8.0.0.0 - 8.0.0.8, 9.0.0.0 - 9.0.0.2, and 9.0.0 - 9.0.4) clienEPSS 1.3%CVE-2019-4224MEDIUMIBM PureApplication System 2.2.3.0 through 2.2.5.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemEPSS 1.3%CVE-2017-1262—IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using speciaEPSS 1.3%