Vulnerabilidades en IBM
6181 resultadosCVE-2022-30614MEDIUMIBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to a denial of service via email flooding caused by sending a specially-crafteEPSS 1.8%CVE-2024-35133MEDIUMIBM Security Verify Access HTTP open redirectEPSS 1.8%CVE-2020-4703HIGHIBM Spectrum Protect Plus 10.1.0 through 10.1.6 Administrative Console could allow an authenticated attacker to upload arbitrary files whichEPSS 1.8%CVE-2020-4795MEDIUMIBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially craftEPSS 1.8%CVE-2021-38965MEDIUMIBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system EPSS 1.8%CVE-2022-40609HIGHIBM SDK, Java Technology Edition code executionEPSS 1.8%CVE-2018-2013MEDIUMIBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks agaEPSS 1.8%CVE-2018-1729MEDIUMIBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the systeEPSS 1.8%CVE-2019-4293MEDIUMIBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could EPSS 1.8%CVE-2021-38945MEDIUMIBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 could allow a remote attacker to upload arbitrary files, caused by improper content validatiEPSS 1.8%CVE-2021-20533HIGHIBM Security Verify Access Docker 10.0.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending EPSS 1.8%CVE-2020-4239MEDIUMIBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical eEPSS 1.8%CVE-2022-22489HIGHIBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML daEPSS 1.8%CVE-2018-1694MEDIUMIBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rational DOORS Next GenerEPSS 1.8%CVE-2018-1470MEDIUMIBM Sterling File Gateway 2.2.0 through 2.2.6 could allow a remote authenticated attacker to obtain sensitive information displayed in the UEPSS 1.8%CVE-2016-6093—IBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by default, which makes it easier for attackers toEPSS 1.8%CVE-2021-20509HIGHIBM Maximo Asset Management 7.6.0 and 7.6.1 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands oEPSS 1.7%CVE-2018-1969CRITICALIBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed wEPSS 1.7%CVE-2018-1638MEDIUMIBM API Connect 5.0.0.0-5.0.8.3 Developer Portal does not enforce Two Factor Authentication (TFA) while resetting a user password but enforcEPSS 1.7%CVE-2017-1328—IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of sEPSS 1.7%