Vulnerabilities in IBM

6,181 results
CVE-2018-1905HIGHIBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML dEPSS 2.5%CVE-2020-5016MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When applicatioEPSS 2.5%CVE-2018-1779HIGHIBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not setting limits on JSEPSS 2.5%CVE-2018-2006MEDIUMIBM Robotic Process Automation with Automation Anywhere 11 could allow a remote attacker to traverse directories on the system. An attacker EPSS 2.5%CVE-2021-20576HIGHIBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the applicationEPSS 2.5%CVE-2026-84278HIGHIBM Guardium Data Protection Command InjectionEPSS 2.5%CVE-2018-1435HIGHIBM Notes 8.5 and 9.0 is vulnerable to a DLL hijacking attack. A remote attacker could trick a user to double click a malicious executable iEPSS 2.5%CVE-2017-1458—IBM QRadar Network Security 5.4 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker coEPSS 2.5%CVE-2021-20453HIGHIBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. AEPSS 2.5%CVE-2018-1727HIGHIBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XMEPSS 2.5%CVE-2017-1723—IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a speciallyEPSS 2.5%CVE-2018-1801MEDIUMIBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.1EPSS 2.5%CVE-2020-4670HIGHIBM Planning Analytics Local 2.0 connects to a Redis server. The Redis server, an in-memory data structure store, running on the remote hostEPSS 2.4%CVE-2017-1749MEDIUMIBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker coEPSS 2.4%CVE-2018-1457HIGHAn undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileEPSS 2.4%CVE-2020-4362HIGHIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-bEPSS 2.4%CVE-2020-4854CRITICALIBM Spectrum Protect Plus 10.1.0 thorugh 10.1.6 contains hard-coded credentials, such as a password or cryptographic key, which it uses for EPSS 2.4%CVE-2019-4424HIGHIBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXEEPSS 2.4%CVE-2019-4419HIGHIBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dEPSS 2.4%CVE-2019-4340HIGHIBM Security Guardium Big Data Intelligence 4.0 (SonarG) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML EPSS 2.4%