Vulnerabilities in IBM

6,181 results
CVE-2019-4268MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker couEPSS 2.7%CVE-2020-4471MEDIUMIBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions EPSS 2.7%CVE-2017-1696—IBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-craftEPSS 2.7%CVE-2020-4495HIGHIBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access coEPSS 2.6%CVE-2017-1376—A flaw in the IBM J9 VM class verifier allows untrusted code to disable the security manager and elevate its privileges. IBM X-Force ID: 126EPSS 2.6%CVE-2019-4155HIGHIBM API Connect's Developer Portal 2018.1 and 2018.4.1.3 is impacted by a privilege escalation vulnerability when integrated with an OpenID EPSS 2.6%CVE-2019-4521HIGHPlatform System Manager in IBM Cloud Pak System 2.3 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary coEPSS 2.6%CVE-2020-4711MEDIUMIBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An attacker could send EPSS 2.6%CVE-2020-4434HIGHCertain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could aEPSS 2.6%CVE-2019-4713HIGHIBM Security Guardium Data Encryption (GDE) 3.0.0.2 could allow a remote authenticated attacker to execute arbitrary commands on the system.EPSS 2.6%CVE-2020-4789MEDIUMIBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 could allow a remote attacker to traverse direEPSS 2.6%CVE-2019-4460MEDIUMIBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker coEPSS 2.6%CVE-2019-4430MEDIUMIBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafEPSS 2.6%CVE-2019-4364MEDIUMIBM Maximo Asset Management 7.6 is vulnerable to CSV injection, which could allow a remote authenticated attacker to execute arbirary commanEPSS 2.6%CVE-2020-4782MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker couEPSS 2.6%CVE-2018-1744HIGHIBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the system. An attacker cEPSS 2.6%CVE-2020-5015HIGHIBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to causeEPSS 2.6%CVE-2021-29696HIGHIBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to exEPSS 2.5%CVE-2020-4693CRITICALIBM Spectrum Protect Operations Center 7.1.0.000 through 7.1.10 and 8.1.0.000 through 8.1.9 may allow an attacker to execute arbitrary code EPSS 2.5%CVE-2018-1649HIGHIBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specEPSS 2.5%