Browse CVEs

MEDIUM 6.5 CVE-2020-4240 IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a special… Spectrum Protect Plus after 10.1.5 Fix from $1,6002020-03-31 MEDIUM 5.3 CVE-2019-4423 IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a speci… Sterling File Gateway after 6.0.1.0 Fix from $1,6002019-09-30 MEDIUM 6.5 CVE-2018-1847 IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.… Financial Transaction Manager For Multiplatform after 3.0.0.8 Fix from $1,6002019-09-18 MEDIUM 5.3 CVE-2019-4268 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a… Websphere Application Server after 9.0.5.0 Fix from $1,6002019-09-17 HIGH 7.5 CVE-2019-4460 IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send … Api Connect after 5.0.8.6 Fix from $1,9502019-08-20 HIGH 7.5 CVE-2019-4430 IBM Maximo Asset Management 7.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL r… Maximo Asset Management Patch available Fix from $1,9502019-07-17 HIGH 7.5 CVE-2019-4252 IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 could allow a remote attacker to traverse directories on the system. An attacker … Rational Collaborative Lifecycle Management after 6.0.6.1 Fix from $1,9502019-06-27 CRITICAL 9.1 CVE-2019-4178 IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request t… Cognos Analytics after 11.0.13.0 Fix from $2,3002019-04-15 HIGH 7.5 CVE-2018-1618 IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker cou… Security Privileged Identity Manager Mitigation only Fix from $1,9502019-04-02 MEDIUM 5.5 CVE-2018-1797 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 using Enterprise bundle Archives (EBA) could allow a local attacker to traverse directories o… Websphere Application Server after 9.0.0.9 Fix from $1,6002018-11-16 HIGH 7.8 CVE-2018-1884 IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote atta… Case Manager Mitigation only Fix from $1,9502018-11-12 MEDIUM 6.5 CVE-2018-1744 IBM Security Key Lifecycle Manager 2.5, 2.6, 2.7, and 3.0 could allow a remote attacker to traverse directories on the system. An attacker could send… Security Key Lifecycle Manager after 3.0.0.1 Fix from $1,6002018-10-15 MEDIUM 6.5 CVE-2018-1770 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a… Websphere Application Server after 9.0.0.9 Fix from $1,6002018-10-12 MEDIUM 6.5 CVE-2018-1649 IBM QRadar Incident Forensics 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-cra… Qradar Incident Forensics after 7.3.1 Fix from $1,6002018-10-05 MEDIUM 5.3 CVE-2017-1749 IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter… Urbancode Deploy after 6.9.6.0 Fix from $1,6002018-08-13 HIGH 7.5 CVE-2013-3001 Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspe… Infosphere Data Replication Dashboard Mitigation only Fix from $1,9502018-07-09 MEDIUM 6.5 CVE-2017-1723 IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted … Qradar Security Information And Event Manager 7.2.8+ Fix from $1,6002018-04-26 MEDIUM 6.5 CVE-2017-1279 IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker to traverse directories on the system. An attacker could send a spe… Tealeaf Customer Experience Patch available Fix from $1,6002018-01-26 HIGH 7.5 CVE-2017-1671 IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 could allow a remote attacker to traverse directories on the system. An attacker could send a spec… Security Key Lifecycle Manager Patch available Fix from $1,9502018-01-09 MEDIUM 5.3 CVE-2017-1548 IBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL req… Sterling File Gateway Mitigation only Fix from $1,6002017-12-11 HIGH 7.5 CVE-2017-1577 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-c… Websphere Portal Patch available Fix from $1,9502017-09-28 MEDIUM 6.5 CVE-2015-0107EPSS 6% IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 and 7.2 a… Change And Configuration Management Database Mitigation only Fix from $1,6002017-04-24 MEDIUM 6.5 CVE-2016-8933 IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request c… Kenexa Lms Patch available Fix from $1,6002017-02-01 MEDIUM 5.7 CVE-2016-5941 IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request c… Kenexa Lms Patch available Fix from $1,6002017-02-01 MEDIUM 6.5 CVE-2016-6126 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a speciall… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 6.5 CVE-2016-8913 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a speciall… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 6.8 CVE-2016-2933 Directory traversal vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated administrators to read arbitrary files via a … Bigfix Remote Control after 9.1.2 Fix from $1,6002016-11-30 HIGH 7.5 CVE-2016-6023 Directory traversal vulnerability in the Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4.3 before 3.4.3.… Sterling Secure Proxy Mitigation only Fix from $1,9502016-10-06 MEDIUM 6.5 CVE-2016-6038 Directory traversal vulnerability in Eclipse Help in IBM Tivoli Lightweight Infrastructure (aka LWI), as used in AIX 5.3, 6.1, and 7.1, allows remote… Aix Mitigation only Fix from $1,6002016-09-26 MEDIUM 6.5 CVE-2016-5970 Directory traversal vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 allows remote authentica… Security Privileged Identity Manager Virtual Appliance after 2.0.2 Fix from $1,6002016-09-26