Vulnerabilidades en IBM
6267 resultadosCVE-2020-5001MEDIUMIBM Financial Transaction Manager path traversalEPSS 1.0%CVE-2023-30991HIGHIBM Db2 denial of serviceEPSS 1.0%CVE-2026-14522HIGHIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsEPSS 1.0%CVE-2021-20585MEDIUMIBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against tEPSS 1.0%CVE-2023-35009MEDIUMIBM Cognos Analytics information disclosureEPSS 1.0%CVE-2018-1485LOWIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not renew a session variable after a successful authentication which couEPSS 1.0%CVE-2019-4264MEDIUMIBM QRadar SIEM 7.2.8 WinCollect could allow an attacker to obtain sensitive information by spoofing a trusted entity using man in the middlEPSS 1.0%CVE-2021-38875MEDIUMIBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD is vulnerable to a denial of service attack caused by an error processing messagesEPSS 1.0%CVE-2023-27556MEDIUMIBM Safer Payments denial of serviceEPSS 1.0%CVE-2018-1507MEDIUMIBM DOORS Next Generation (DNG/RRC) 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScriEPSS 1.0%CVE-2022-22310MEDIUMIBM WebSphere Application Server Liberty 21.0.0.10 through 21.0.0.12 could provide weaker than expected security. A remote attacker could exEPSS 1.0%CVE-2021-29714MEDIUMIBM Content Navigator 3.0.CD could allow a malicious user to cause a denial of service due to improper input validation. IBM X-Force ID: 200EPSS 1.0%CVE-2020-5022MEDIUMIBM Spectrum Protect Plus 10.1.0 through 10.1.6 may allow unauthenticated and unauthorized access to VDAP proxy which can result in an attacEPSS 1.0%CVE-2019-4304MEDIUMIBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validatiEPSS 1.0%CVE-2020-4873MEDIUMIBM Planning Analytics 2.0 could allow an attacker to obtain sensitive information due to an overly permissive CORS policy. IBM X-Force ID: EPSS 1.0%CVE-2021-20442MEDIUMIBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound autheEPSS 1.0%CVE-2018-1484LOWIBM BigFix Platform 9.2.0 through 9.2.14 and 9.5 through 9.5.9 does not set the secure attribute on authorization tokens or session cookies.EPSS 1.0%CVE-2023-30990HIGHIBM i command executionEPSS 1.0%CVE-2017-1319—IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookieEPSS 1.0%CVE-2016-2980—The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a EPSS 1.0%