Vulnerabilidades en IBM
6181 resultadosCVE-2017-1379—IBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by improper handling of requests to the DeveloEPSS 2.0%CVE-2017-1741MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper hanEPSS 2.0%CVE-2019-4066HIGHIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID EPSS 2.0%CVE-2017-1747MEDIUMA specially crafted message could cause a denial of service in IBM WebSphere MQ 9.0, 9.0.0.1, 9.0.0.2, 9.0.1, 9.0.2, 9.0.3, and 9.0.4 applicEPSS 2.0%CVE-2020-4512CRITICALIBM QRadar SIEM 7.3 and 7.4 could allow a remote privileged user to execute commands.EPSS 2.0%CVE-2022-43864HIGHIBM Business Automation Workflow information disclosureEPSS 2.0%CVE-2020-5024HIGHIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow an unauthenticated attacker toEPSS 2.0%CVE-2018-1956MEDIUMIBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes it easier for attackersEPSS 2.0%CVE-2021-39031HIGHIBM WebSphere Application Server - Liberty 17.0.0.3 through 22.0.0.1 could allow a remote authenticated attacker to conduct an LDAP injectioEPSS 2.0%CVE-2017-1597MEDIUMIBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2, 10.1.3, 10.1.4, and 10.5 Database Activity Monitor does not require that users should haveEPSS 2.0%CVE-2018-1453HIGHIBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that canEPSS 2.0%CVE-2020-4759HIGHIBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands oEPSS 2.0%CVE-2020-4952HIGHIBM Security Guardium 11.2 could allow an authenticated user to gain root access due to improper access control. IBM X-Force ID: 192028.EPSS 2.0%CVE-2019-4336HIGHIBM Robotic Process Automation with Automation Anywhere 11 uses an inadequate account lockout setting that could allow a remote attacker to EPSS 2.0%CVE-2020-4821MEDIUMIBM InfoSphere Data Replication 11.4 and IBM InfoSphere Change Data Capture for z/OS 10.2.1, under certain configurations, could allow a useEPSS 2.0%CVE-2020-4776MEDIUMA path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traveEPSS 2.0%CVE-2021-29679HIGHIBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authenticated user to execute code remotely due to incorrectly neutralizaing user-contEPSS 2.0%CVE-2022-22336HIGHIBM Sterling External Authentication Server and IBM Sterling Secure Proxy 6.0.3.0, 6.0.2.0, and 3.4.3.2 could allow a remote user to consumeEPSS 2.0%CVE-2017-1467—A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorizedEPSS 2.0%CVE-2018-1503MEDIUMIBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a remotely authenticated attacker to to send invalid or malformed headers that could cause meEPSS 2.0%