Vulnerabilidades en IBM
6267 resultadosCVE-2017-1258—IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality allowing anonymous useEPSS 1.1%CVE-2020-4327LOWIBM Security Secret Server 10.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is retEPSS 1.1%CVE-2022-42444MEDIUMIBM App Connect Enterprise denial of serviceEPSS 1.1%CVE-2017-1248MEDIUMIBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection. A remote attacker could inject malicious HTML code, EPSS 1.1%CVE-2018-1785LOWIBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) uses weaker than expected cryptographic algorithms that could allow an attackeEPSS 1.1%CVE-2021-29678HIGHIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a user with DBADM authority toEPSS 1.1%CVE-2020-4232MEDIUMIBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials whichEPSS 1.1%CVE-2017-1700—IBM Jazz Team Server affecting the following IBM Rational Products: Collaborative Lifecycle Management (CLM), Rational DOORS Next GenerationEPSS 1.1%CVE-2022-22483MEDIUMIBM Db2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, 11.1, and 11.5 is vulnerable to an information disclosure in some scenarios due to unauEPSS 1.1%CVE-2021-29665CRITICALIBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a locaEPSS 1.1%CVE-2020-4329MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obEPSS 1.1%CVE-2020-4990HIGHIBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow EPSS 1.1%CVE-2021-38910LOWIBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper valiEPSS 1.1%CVE-2016-9717—HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It EPSS 1.1%CVE-2020-4636HIGHIBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503.EPSS 1.1%CVE-2023-26281MEDIUMIBM HTTP Server denial of serviceEPSS 1.1%CVE-2019-4330LOWIBM Security Guardium Big Data Intelligence (SonarG) 4.0 does not set the secure attribute for cookies in HTTPS sessions, which could cause EPSS 1.1%CVE-2020-4779HIGHA HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request,EPSS 1.1%CVE-2019-4227MEDIUMIBM MQ 8.0.0.4 - 8.0.0.12, 9.0.0.0 - 9.0.0.6, 9.1.0.0 - 9.1.0.2, and 9.1.0 - 9.1.2 AMQP Listeners could allow an unauthorized user to conducEPSS 1.1%CVE-2021-20526LOWIBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the HTTPOnly flag. A EPSS 1.1%