Vulnerabilidades en IBM
5972 resultadosCVE-2020-4897MEDIUMIBM Emptoris Contract Management and IBM Emptoris Spend Analysis 10.1.0, 10.1.1, and 10.1.3 could allow a remote attacker to obtain sensitivEPSS 1.6%CVE-2019-4441MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack EPSS 1.6%CVE-2018-2015MEDIUMIBM API Connect 2018.1 and 2018.4.1.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to vEPSS 1.6%CVE-2017-1757—IBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow EPSS 1.6%CVE-2018-1808MEDIUMIBM WebSphere Commerce 9.0.0.0 through 9.0.0.6 could allow some server-side code injection due to inadequate input control. IBM X-Force ID: EPSS 1.6%CVE-2019-4129LOWIBM Spectrum Protect Operations Center 7.1 and 8.1 could allow a remote attacker to obtain sensitive information, caused by an error messageEPSS 1.6%CVE-2026-16466HIGHDataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareEPSS 1.6%CVE-2018-1838MEDIUMIBM WebSphere Application Server 8.5 and 9.0 in IBM Cloud could allow a remote attacker to obtain sensitive information caused by improper hEPSS 1.6%CVE-2017-1254—IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could eEPSS 1.6%CVE-2021-38917HIGHIBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary hosEPSS 1.6%CVE-2019-4186MEDIUMIBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during cachiEPSS 1.6%CVE-2017-1221—IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easEPSS 1.6%CVE-2020-4686MEDIUMIBM Spectrum Virtualize 8.3.1 could allow a remote user authenticated via LDAP to escalate their privileges and perform actions they should EPSS 1.6%CVE-2022-22389MEDIUMIBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may terminate abnormaEPSS 1.6%CVE-2019-4729MEDIUMIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is EPSS 1.6%CVE-2021-38951HIGHIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by sending a specially-crafted request.EPSS 1.6%CVE-2021-38890MEDIUMIBM Sterling Connect:Direct Web Services 1.0 and 6.0 uses an inadequate account lockout setting that could allow a remote attacker to brute EPSS 1.6%CVE-2020-4216HIGHIBM Spectrum Protect Plus 10.1.0 through 10.1.5 contains hard-coded credentials, such as a password or cryptographic key, which it uses for EPSS 1.6%CVE-2016-9710—IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a EPSS 1.6%CVE-2020-4771MEDIUMIBM Spectrum Protect Operations Center 8.1.0.000 through 8.1.10.and 7.1.0.000 through 7.1.11 could allow a remote attacker to obtain sensitiEPSS 1.6%