Vulnerabilidades en IBM
6267 resultadosCVE-2021-29739LOWIBM Planning Analytics Local 2.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browserEPSS 1.1%CVE-2023-24958HIGHIBM TS7700 Management Interface command injectionEPSS 1.1%CVE-2021-38919MEDIUMIBM QRadar SIEM 7.3, 7.4, and 7.5 in some senarios may reveal authorized service tokens to other QRadar users. IBM X-Force ID: 210021EPSS 1.1%CVE-2023-45178MEDIUMIBM Db2 denial of serviceEPSS 1.1%CVE-2018-1371—An IBM WebSphere MQ 8.0.0.8, 9.0.0.2, and 9.0.4 Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process EPSS 1.1%CVE-2019-6159CRITICALA stored cross-site scripting (XSS) vulnerability exists in various firmware versions of the legacy IBM System x IMM (IMM v1) embedded BasebEPSS 1.1%CVE-2023-46167MEDIUMIBM Db2 denial of serviceEPSS 1.1%CVE-2017-1722—IBM Security QRadar SIEM 7.2 and 7.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which coEPSS 1.1%CVE-2022-22473LOWIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper hanEPSS 1.1%CVE-2023-38003HIGHIBM Db2 command executionEPSS 1.1%CVE-2020-4151MEDIUMIBM QRadar SIEM 7.3.0 through 7.3.3 could allow an authenticated attacker to perform unauthorized actions due to improper input validation. EPSS 1.1%CVE-2022-22312MEDIUMIBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of servicEPSS 1.1%CVE-2022-22323MEDIUMIBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of servicEPSS 1.1%CVE-2022-38387HIGHIBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.2.0 could allow a remote authenticated attacker to execute arbitrary commands on theEPSS 1.1%CVE-2018-1423MEDIUMIBM Jazz Foundation products could disclose sensitive information to an authenticated attacker that could be used in further attacks againstEPSS 1.1%CVE-2020-4901MEDIUMIBM Robotic Process Automation with Automation Anywhere 11.0 could allow an attacker on the network to obtain sensitive information or causeEPSS 1.1%CVE-2023-40699HIGHIBM InfoSphere Information Server denial of serviceEPSS 1.1%CVE-2019-4285MEDIUMIBM WebSphere Application Server - Liberty Admin Center could allow a remote attacker to hijack the clicking action of the victim. By persuaEPSS 1.1%CVE-2017-1506—IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in EPSS 1.1%CVE-2024-51450CRITICALIBM Security Verify Directory Command ExecutionEPSS 1.1%