Vulnerabilidades en IBM
6267 resultadosCVE-2019-4477MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a user with access to audit logs to obtain sensitive information, causedEPSS 1.3%CVE-2017-1368MEDIUMIBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 does not set the secure attribute on authorization tokens or session EPSS 1.3%CVE-2021-29687LOWIBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalidEPSS 1.3%CVE-2023-42031MEDIUMIBM CICS TX denial of serviceEPSS 1.3%CVE-2020-4993MEDIUMIBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path trEPSS 1.3%CVE-2017-1495—IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a privileged user to cause a memory dump that could contain highly sensitiEPSS 1.3%CVE-2019-4655MEDIUMIBM MQ 9.1.0.0, 9.1.0.1, 9.1.0.2, 9.1.0.3, 9.1.1, 9.1.2, and 9.1.3 is vulnerable to a denial of service attack that would allow an authenticEPSS 1.3%CVE-2018-1705MEDIUMIBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability tEPSS 1.3%CVE-2017-1239MEDIUMIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses. IBM X-EPSS 1.3%CVE-2022-22358HIGHIBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to an XML External Entity Injection (XXE) attack when EPSS 1.3%CVE-2018-1974HIGHIBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM EPSS 1.3%CVE-2019-4576MEDIUMIBM QRadar Network Packet Capture 7.3.0 - 7.3.3 Patch 1 and 7.4.0 GA does not require that users should have strong passwords by default, whEPSS 1.3%CVE-2021-20422HIGHIBM Cloud Pak for Applications 4.3 could disclose sensitive information to a malicious attacker by accessing data stored in memory. IBM X-FoEPSS 1.3%CVE-2019-4109MEDIUMIBM WebSphere eXtreme Scale 8.6 Admin Console could allow a remote attacker to hijack the clicking action of the victim. By persuading a vicEPSS 1.3%CVE-2021-38918HIGHIBM PowerVM Hypervisor FW860, FW940, FW950, and FW1010, through a specific sequence of VM management operations could lead to a violation ofEPSS 1.3%CVE-2017-1705MEDIUMIBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. While this information is not visEPSS 1.2%CVE-2017-1515—IBM Doors Web Access 9.5 and 9.6 could allow an authenticated user to obtain sensitive information from HTTP internal server error responsesEPSS 1.2%CVE-2018-1708MEDIUMIBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through theEPSS 1.2%CVE-2019-4694MEDIUMIBM Security Guardium Data Encryption (GDE) 3.0.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses EPSS 1.2%CVE-2020-4385MEDIUMIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its ownEPSS 1.2%