Vulnerabilidades en IBM
5945 resultadosCVE-2020-4365MEDIUMIBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authentiEPSS 1.4%CVE-2021-20464MEDIUMIBM Cognos Analytics PowerPlay (IBM Cognos Analytics 11.1.7, 11.2.0, and 11.1.7) could be vulnerable to an XML Bomb attack by a malicious auEPSS 1.4%CVE-2020-4246HIGHIBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML dEPSS 1.4%CVE-2017-1223—IBM Tivoli Endpoint Manager could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victimEPSS 1.4%CVE-2023-35893CRITICALIBM Security Guardium command executionEPSS 1.4%CVE-2018-1668MEDIUMIBM DataPower Gateway 7.5.0.0 through 7.5.0.19, 7.5.1.0 through 7.5.1.18, 7.5.2.0 through 7.5.2.18, and 7.6.0.0 through 7.6.0.11 appliances EPSS 1.4%CVE-2020-4161MEDIUMIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 could allow an authenticated attacker to cause a denial of service duEPSS 1.4%CVE-2020-4781MEDIUMAn improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which coEPSS 1.4%CVE-2023-33839HIGHIBM Security Verify Governance command executionEPSS 1.4%CVE-2021-29697MEDIUMIBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could allow a remote authenticated attacker to obEPSS 1.4%CVE-2019-4722MEDIUMIBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information via a stack trace due to mishandling of cerEPSS 1.4%CVE-2017-1538—IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an authenticated user to obtain sensitive informatioEPSS 1.4%CVE-2017-1433—IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into the channel which wouEPSS 1.4%CVE-2018-1463—IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products ( 6.1, 6.2, 6.3, 6.4, 7.1, 7.2, 7.3, 7.4, 7.5,EPSS 1.4%CVE-2020-4236MEDIUMIBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow an authenticated user to cause a denial of service due to improper content paEPSS 1.4%CVE-2018-1647HIGHIBM QRadar Incident Forensics 7.2 and 7.3 does not properly restrict the size or amount of resources requested which could allow an unauthenEPSS 1.4%CVE-2019-4036HIGHIBM Security Access Manager Appliance could allow unauthenticated attacker to cause a denial of service in the reverse proxy component. IBM EPSS 1.4%CVE-2023-25926MEDIUMIBM Security Guardium Key Lifecycle Manager XML external entity injectionEPSS 1.4%CVE-2019-4378MEDIUMIBM MQ 7.5.0.0 - 7.5.0.9, 7.1.0.0 - 7.1.0.9, 8.0.0.0 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 command server is vEPSS 1.4%CVE-2021-20584MEDIUMIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow a remote attacker to upload arbitrary files, caused by improper access controlEPSS 1.4%