Vulnerabilidades en IBM
6181 resultadosCVE-2018-1883MEDIUMA problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and 9.1.0.0 Console REST API Could allow attackers to execute a denial of service atEPSS 2.4%CVE-2018-1786MEDIUMIBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WAIT state. This can cause TCP/IEPSS 2.4%CVE-2019-4043HIGHIBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processinEPSS 2.4%CVE-2018-1426HIGHIBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() system calls when multipleEPSS 2.4%CVE-2020-4420HIGHIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker toEPSS 2.4%CVE-2018-1424HIGHIBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remoEPSS 2.4%CVE-2018-1920HIGHIBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remotEPSS 2.4%CVE-2018-2019HIGHIBM Security Identity Manager 6.0.0 Virtual Appliance is vulnerable to a XML External Entity Injection (XXE) attack when processing XML dataEPSS 2.4%CVE-2018-1595HIGHIBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to impropeEPSS 2.4%CVE-2018-1719MEDIUMIBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a doEPSS 2.4%CVE-2018-1364—IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker EPSS 2.4%CVE-2018-1542HIGHIBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1EPSS 2.4%CVE-2019-4724MEDIUMIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settEPSS 2.4%CVE-2019-4723MEDIUMIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settEPSS 2.4%CVE-2020-4689MEDIUMIBM Security Guardium 11.2 is vulnerable to CVS Injection. A remote privileged attacker could execute arbitrary commands on the system, causEPSS 2.4%CVE-2019-4505LOWIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caEPSS 2.4%CVE-2019-4261MEDIUMIBM WebSphere MQ V7.1, 7.5, IBM MQ V8, IBM MQ V9.0LTS, IBM MQ V9.1 LTS, and IBM MQ V9.1 CD are vulnerable to a denial of service attack causEPSS 2.4%CVE-2017-1192—IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker cEPSS 2.3%CVE-2018-1398MEDIUMIBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote attacker to download certain files that could contain sensitive informatiEPSS 2.3%CVE-2020-5023HIGHIBM Spectrum Protect Plus 10.1.0 through 10.1.7 could allow a remote user to inject arbitrary data iwhich could cause the serivce to crash dEPSS 2.3%