Browse high-severity CVEs

Informix Dynamic Server MEDIUM 6.5

CVE-2017-1310

IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files to the serv…

Patch available

Fix from $1,600 2017-06-29

Data Server Client HIGH 7.3

CVE-2017-1297

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, caused by…

Patch available

Fix from $1,950 2017-06-27

Data Server Client HIGH 7.1

CVE-2017-1105

IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could allow a loc…

Patch available

Fix from $1,950 2017-06-27

Elastic Storage Server MEDIUM 6.2

CVE-2017-1304

IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) during testing…

Mitigation only

Fix from $1,600 2017-06-21

Domino HIGH 8.8

CVE-2017-1274EPSS 7%

IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute arbitrary…

No fix yet

Fix from $1,950 2017-04-25

Cognos Business Intelligence HIGH 7.5

CVE-2016-3036

IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets. A remote attacker co…

Patch available

Fix from $1,950 2017-04-17

Websphere Mq MEDIUM 6.5

CVE-2016-8971

IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box hav…

Patch available

Fix from $1,600 2017-03-07

Tivoli Storage Manager HIGH 7.2

CVE-2016-8998

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a speciall…

Patch available

Fix from $1,950 2017-02-24

General Parallel File System HIGH 7.2

CVE-2016-6115

IBM General Parallel File System is vulnerable to a buffer overflow. A remote authenticated attacker could overflow a buffer and execute arbitrary co…

Patch available

Fix from $1,950 2017-02-01

Tivoli Storage Manager HIGH 7.8

CVE-2016-5985

The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local att…

Fix: after 7.1.6.2

Fix from $1,950 2017-02-01

Security Appscan HIGH 7.3

CVE-2016-6042

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memor…

Patch available

Fix from $1,950 2017-02-01

Powerkvm CRITICAL 9.1

CVE-2015-5073EPSS 8%

Heap-based buffer overflow in the find_fixedlength function in pcre_compile.c in PCRE before 8.38 allows remote attackers to cause a denial of servic…

Fix: after 8.37

Fix from $2,300 2016-12-13

Tivoli Monitoring HIGH 7.8

CVE-2016-2946

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 befo…

Patch available

Fix from $1,950 2016-12-01

Domino HIGH 7.8

CVE-2016-0301

Heap-based buffer overflow in the KeyView PDF filter in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6 allows remote attackers to ex…

Mitigation only

Fix from $1,950 2016-06-26

Spss Statistics MEDIUM 6.5

CVE-2015-8530

Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.0.0.2-IF0008, 21 before 21.0.…

Fix: 20.0.0.2 / 21.0.0.2+

Fix from $1,600 2016-05-14