Vulnerabilidades en IBM
6267 resultadosCVE-2018-1626LOWIBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a successful authentication which cEPSS 1.1%CVE-2018-1996MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security, caused by the improper TLS configuratioEPSS 1.1%CVE-2026-53710CRITICALMCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_serverEPSS 1.1%CVE-2016-9983—IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should noEPSS 1.1%CVE-2021-29854MEDIUMIBM Maximo Asset Management 7.6.1.1 and 7.6.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST hEPSS 1.1%CVE-2018-1948MEDIUMIBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tEPSS 1.1%CVE-2022-34160MEDIUMIBM CICS TX Standard and Advanced 11.1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when vieweEPSS 1.1%CVE-2018-1551LOWIBM WebSphere MQ 8.0.0.2 through 8.0.0.8 and 9.0.0.0 through 9.0.0.3 could allow users to have more authority than they should have if an MQEPSS 1.1%CVE-2023-27876HIGHIBM TRIRIGA Application Platform XML external entity injectionEPSS 1.1%CVE-2021-38879LOWIBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failEPSS 1.1%CVE-2022-22474MEDIUMIBM Spectrum Protect 8.1.0.0 through 8.1.14.0 dsmcad, dsmc, and dsmcsvc processes incorrectly handle certain read operations on TCP/IP sockeEPSS 1.1%CVE-2021-20355LOWIBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failEPSS 1.1%CVE-2020-4399MEDIUMIBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could allow an authenticated user to send malformed requests to cause a denial of service against tEPSS 1.1%CVE-2020-4511MEDIUMIBM QRadar SIEM 7.3 and 7.4 could allow an authenticated user to cause a denial of service of the qflow process by sending a malformed sflowEPSS 1.1%CVE-2017-1117—IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM XEPSS 1.1%CVE-2021-29903MEDIUMIBM Sterling B2B Integrator Standard Edition 5.2.6.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially EPSS 1.1%CVE-2021-29798MEDIUMIBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.1.0 is vulnerable to SQL injection. A remote attacker could send specially EPSS 1.1%CVE-2018-1480MEDIUMIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the 'HttpOnly' attribute on authorization tokens or session cookEPSS 1.1%CVE-2021-20494MEDIUMIBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticarEPSS 1.1%CVE-2017-1258—IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous useEPSS 1.1%