Vulnerabilidades en IBM
6181 resultadosCVE-2020-4302MEDIUMIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to execute arbitrary code on the system, caused by a CSV injection. By persEPSS 1.7%CVE-2021-39053MEDIUMIBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper hEPSS 1.7%CVE-2017-1503—IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit thEPSS 1.7%CVE-2020-4271MEDIUMIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower pEPSS 1.7%CVE-2017-1519—IBM DB2 10.5 and 11.1 contains a denial of service vulnerability. A remote user can cause disruption of service for DB2 Connect Server setupEPSS 1.7%CVE-2020-4572MEDIUMIBM Tivoli Key Lifecycle Manager 3.0.1 and 4.0 could allow a remote attacker to obtain sensitive information when a detailed technical errorEPSS 1.7%CVE-2018-1784HIGHIBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807EPSS 1.7%CVE-2020-4875HIGHIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A EPSS 1.7%CVE-2020-4876HIGHIBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A EPSS 1.7%CVE-2019-4338HIGHIBM Security Guardium Big Data Intelligence 4.0 (SonarG) does not properly restrict the size or amount of resources that are requested or inEPSS 1.7%CVE-2019-4203HIGHIBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal can be exploited by app developers to download arbitrary files from the host OS and potEPSS 1.7%CVE-2017-1633MEDIUMIBM Sterling B2B Integrator 5.2 through 5.2.6 could allow an authenticated attacker to obtain sensitive variable name information using specEPSS 1.7%CVE-2021-20574HIGHIBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specEPSS 1.7%CVE-2017-1480MEDIUMIBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log filesEPSS 1.7%CVE-2020-4958HIGHIBM Security Identity Governance and Intelligence 5.2.6 does not perform any authentication for functionality that requires a provable user EPSS 1.7%CVE-2020-4870MEDIUMIBM MQ 9.2 CD and LTS are vulnerable to a denial of service attack caused by an error processing connecting applications. IBM X-Force ID: 19EPSS 1.7%CVE-2020-4638HIGHIBM API Connect's API Manager 2018.4.1.0 through 2018.4.1.12 is vulnerable to privilege escalation. An invitee to an API Provider organizatiEPSS 1.7%CVE-2017-1395MEDIUMIBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive inEPSS 1.7%CVE-2022-34348HIGHIBM Sterling Partner Engagement Manager 6.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remotEPSS 1.7%CVE-2015-0102—IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackersEPSS 1.7%