Vulnerabilidades en IBM
5945 resultadosCVE-2026-16468HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2022-22489HIGHIBM MQ 8.0, (9.0, 9.1, 9.2 LTS), and (9.1 and 9.2 CD) are vulnerable to an XML External Entity Injection (XXE) attack when processing XML daEPSS 1.7%CVE-2020-4616MEDIUMIBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM EPSS 1.7%CVE-2019-4051MEDIUMSome URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paEPSS 1.7%CVE-2019-4422HIGHIBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the acceEPSS 1.7%CVE-2017-1474MEDIUMIBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorizeEPSS 1.7%CVE-2017-1666—IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. AEPSS 1.7%CVE-2026-81537HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2018-1833MEDIUMIBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has alreEPSS 1.7%CVE-2018-1674MEDIUMIBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send speEPSS 1.7%CVE-2018-1699MEDIUMIBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements,EPSS 1.7%CVE-2019-4059HIGHIBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the passEPSS 1.7%CVE-2021-29703HIGHDb2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when EPSS 1.7%CVE-2022-22360HIGHIBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injecEPSS 1.7%CVE-2017-1310—IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files toEPSS 1.7%CVE-2017-1774—IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used EPSS 1.7%CVE-2016-9711MEDIUMIBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an aEPSS 1.7%CVE-2017-1625MEDIUMIBM Pulse for QRadar 1.0.0 - 1.0.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacEPSS 1.7%CVE-2018-1387MEDIUMIBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to EPSS 1.7%CVE-2017-1272LOWIBM Security Guardium 10.0 and 10.5 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized EPSS 1.7%