Vulnerabilidades en IBM
6267 resultadosCVE-2018-1369LOWIBM Security Guardium Big Data Intelligence (SonarG) 3.1 stores sensitive information in URL parameters. This may lead to information discloEPSS 1.0%CVE-2016-6098—IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security-critical resource in a way that allows that resourEPSS 1.0%CVE-2022-22319MEDIUMIBM Robotic Process Automation 21.0.1 could allow a register user on the system to physically delete a queue that could cause disruption forEPSS 1.0%CVE-2017-1534—IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attaEPSS 1.0%CVE-2018-1943MEDIUMIBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victiEPSS 1.0%CVE-2020-4459MEDIUMIBM Security Verify Access 10.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound EPSS 1.0%CVE-2020-4177MEDIUMIBM Security Guardium 11.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound autheEPSS 1.0%CVE-2023-26021HIGHIBM Db2 denial of serviceEPSS 1.0%CVE-2023-29255HIGHIBM DB2 for Linux, UNIX and Windows denial of serviceEPSS 1.0%CVE-2018-1429MEDIUMIBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JaEPSS 1.0%CVE-2023-30999HIGHIBM Security Access Manager denial of serviceEPSS 1.0%CVE-2021-20402LOWIBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technicaEPSS 1.0%CVE-2024-22317CRITICALIBM App Connect Enterprise denial of serviceEPSS 1.0%CVE-2023-27866MEDIUMIBM Informix JDBC code executionEPSS 1.0%CVE-2019-4306MEDIUMIBM Security Guardium Big Data Intelligence (SonarG) 4.0 specifies permissions for a security-critical resource which could lead to the expoEPSS 1.0%CVE-2021-29847MEDIUMBMC firmware (IBM Power System S821LC Server (8001-12C) OP825.50) configuration changed to allow an authenticated user to open an insecure cEPSS 1.0%CVE-2023-38737MEDIUMIBM WebSphere Application Server Liberty denial of serviceEPSS 1.0%CVE-2019-4533MEDIUMIBM Resilient SOAR V38.0 users may experience a denial of service of the SOAR Platform due to a insufficient input validation. IBM X-Force IEPSS 1.0%CVE-2019-4119LOWIBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also exEPSS 1.0%CVE-2020-5001MEDIUMIBM Financial Transaction Manager path traversalEPSS 1.0%