Vulnerabilidades en IBM
6267 resultadosCVE-2019-4135HIGHIBM Security Access Manager 9.0.1 through 9.0.6 is affected by a security vulnerability that could allow authenticated users to impersonate EPSS 1.5%CVE-2021-29825MEDIUMIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information when using ADMIN_CMD with LOAD or BACEPSS 1.5%CVE-2018-1901MEDIUMIBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to temporarily gain elevated privileges on the system, caused by EPSS 1.5%CVE-2021-38930MEDIUMIBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtaiEPSS 1.5%CVE-2021-38929MEDIUMIBM System Storage DS8000 Management Console (HMC) R8.5 88.5x.x.x, R9.1 89.1x.0.0, and R9.2 89.2x.0.0 could allow a remote attacker to obtaiEPSS 1.5%CVE-2026-16850HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 1.5%CVE-2021-20572MEDIUMIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A reEPSS 1.5%CVE-2021-20573MEDIUMIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remEPSS 1.5%CVE-2020-4625MEDIUMIBM Cloud Pak for Security 1.3.0.1(CP4S) could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTEPSS 1.5%CVE-2018-1643MEDIUMThe Installation Verification Tool of IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vuEPSS 1.5%CVE-2018-1798MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbiEPSS 1.5%CVE-2020-4485MEDIUMIBM QRadar 7.2.0 through 7.2.9 could allow an authenticated user to disable the Wincollect service which could aid an attacker in bypassing EPSS 1.5%CVE-2017-1347—IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statemenEPSS 1.5%CVE-2019-4305MEDIUMIBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cEPSS 1.5%CVE-2017-1297—IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, EPSS 1.5%CVE-2020-4766MEDIUMIBM MQ Internet Pass-Thru 2.1 and 9.2 could allow a remote user to cause a denial of service by sending malformed MQ data requests which wouEPSS 1.5%CVE-2017-1483—IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowinEPSS 1.5%CVE-2023-25927MEDIUMIBM Security Verify Access denial of serviceEPSS 1.5%CVE-2019-4565MEDIUMIBM Security Key Lifecycle Manager 3.0 and 3.0.1 does not require that users should have strong passwords by default, which makes it easier EPSS 1.5%CVE-2019-4068MEDIUMIBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the EPSS 1.5%