Vulnerabilities in IBM

6,181 results
CVE-2020-4180HIGHIBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-cEPSS 3.0%CVE-2020-4545HIGHIBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link LEPSS 3.0%CVE-2020-4272MEDIUMIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-craftedEPSS 3.0%CVE-2026-85542HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 3.0%CVE-2017-1440—IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a speciallEPSS 3.0%CVE-2018-1513MEDIUMIBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to eEPSS 2.9%CVE-2021-29725HIGHIBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consEPSS 2.9%CVE-2020-4561CRITICALIBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacEPSS 2.9%CVE-2020-4135HIGHIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated user to senEPSS 2.9%CVE-2016-8951—IBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a denial of service attack. An attacker can expEPSS 2.9%CVE-2018-1552MEDIUMIBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary code on the system, causEPSS 2.9%CVE-2017-1577—IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a spEPSS 2.9%CVE-2020-4633MEDIUMIBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper EPSS 2.9%CVE-2017-1453—IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sendEPSS 2.9%CVE-2021-29781CRITICALIBM Partner Engagement Manager 2.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserializatioEPSS 2.9%CVE-2017-1731—IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. AEPSS 2.8%CVE-2020-4643HIGHIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dEPSS 2.8%CVE-2018-1563MEDIUMIBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-site scripting. This vulEPSS 2.8%CVE-2020-4343HIGHIBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruptiEPSS 2.8%CVE-2018-1614MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using malformed SAML responses from the SAML identity provider could allow a remote EPSS 2.8%