Browse CVEs

MEDIUM 6.5 CVE-2023-29267 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5is vulnerable to a denial of service, under specific configurat… Db2 Mitigation only Fix from $1,6002024-06-12 MEDIUM 5.5 CVE-2022-43855 IBM SPSS Statistics 26.0, 27.0.1, and 28.0 IO Module could allow a local user to create multiple files that could exhaust the file handles capacity a… Spss Statistics Mitigation only Fix from $1,6002024-03-08 MEDIUM 6.2 CVE-2022-43380 IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX NFS kernel extension to cause a den… Vios Patch available Fix from $1,6002022-12-23 MEDIUM 6.2 CVE-2022-43381 IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1could allow a non-privileged local user to exploit a vulnerability in the AIX SMB client to cause a denial of serv… Vios Patch available Fix from $1,6002022-12-23 MEDIUM 6.5 CVE-2015-7461 XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cau… Connections after 3.0.1.1 Fix from $1,6002018-03-20 HIGH 7.5 CVE-2016-9740 IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources r… Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-07 HIGH 7.5 CVE-2016-8919 IBM WebSphere Application Server may be vulnerable to a denial of service, caused by allowing serialized objects from untrusted sources to run and ca… Websphere Application Server Patch available Fix from $1,9502017-02-01 HIGH 7.5 CVE-2016-0260 Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumpt… Websphere Mq Mitigation only Fix from $1,9502016-06-29 MEDIUM 5.3 CVE-2015-4942 IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconn… Websphere Mq Light Mitigation only Fix from $1,6002016-01-18 HIGH 7.7 CVE-2015-7400 The Lotus Mashups component in IBM Mashup Center 3.0.0.1 allows remote authenticated users to cause a denial of service (CPU consumption) via an XML … Mashups Center Mitigation only Fix from $1,9502016-01-02 HIGH 7.8 CVE-2015-7419 IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted … Websphere Portal Mitigation only Fix from $1,9502015-11-14 HIGH 7.8 CVE-2015-1943 IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and 8.5.0 bef… Websphere Portal Patch available Fix from $1,9502015-09-14 MEDIUM 5.0 CVE-2015-2013 IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service (channel-agent abend and process outage) via a crafted se… Websphere Mq Patch available Fix from $1,6002015-09-14 HIGH 7.8 CVE-2015-1987 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1958 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1956 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentication dat… Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 HIGH 7.8 CVE-2015-1955 IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentication data. Websphere Mq Light Mitigation only Fix from $1,9502015-08-03 MEDIUM 5.0 CVE-2014-8927 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Ti… Endpoint Manager Family Patch available Fix from $1,6002015-05-25 MEDIUM 5.0 CVE-2014-8926 Common Inventory Technology (CIT) before 2.7.0.2050 in IBM License Metric Tool 7.2.2, 7.5, and 9; Endpoint Manger for Software Use Analysis 9; and Ti… Endpoint Manager Family Patch available Fix from $1,6002015-05-25 HIGH 7.8 CVE-2015-1899 IBM WebSphere Portal 8.5 through CF05 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. Websphere Portal Patch available Fix from $1,9502015-05-25 HIGH 7.8 CVE-2015-1886 The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF… Websphere Portal Patch available Fix from $1,9502015-04-27 HIGH 7.8 CVE-2015-0132 The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x befor… Rational Requirements Composer Patch available Fix from $1,9502015-03-18 HIGH 7.8 CVE-2014-3018 IBM BladeCenter SAS Connectivity Module (aka NSSM) and SAS RAID Module (aka RSSM) before 1.3.3.006 allow remote attackers to cause a denial of servic… Sas Raid Module Firmware after 1.3.3.004 Fix from $1,9502015-01-17 MEDIUM 5.0 CVE-2014-6199 The HTTP Server Adapter in IBM Sterling B2B Integrator 5.1 and 5.2.x and Sterling File Gateway 2.1 and 2.2 allows remote attackers to cause a denial … Sterling B2b Integrator Mitigation only Fix from $1,6002015-01-10 MEDIUM 5.0 CVE-2014-3104 IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (me… Rational Clearcase Patch available Fix from $1,6002014-09-23 MEDIUM 5.0 CVE-2014-0949 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, and 8.0 before 8.0.0.1 CF12 allows remote atta… Websphere Portal Patch available Fix from $1,6002014-05-22 HIGH 7.1 CVE-2014-0964 IBM WebSphere Application Server (WAS) 6.1.0.0 through 6.1.0.47 and 6.0.2.0 through 6.0.2.43 allows remote attackers to cause a denial of service via… Websphere Application Server Mitigation only Fix from $1,9502014-05-16 HIGH 7.1 CVE-2014-0963 The Reverse Proxy feature in IBM Global Security Kit (aka GSKit) in IBM Security Access Manager (ISAM) for Web 7.0 before 7.0.0-ISS-SAM-IF0006 and 8.… Security Access Manager For Web Software Patch available Fix from $1,9502014-05-08 MEDIUM 5.0 CVE-2013-0494 IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Rang… Sterling B2b Integrator Mitigation only Fix from $1,6002013-08-09 MEDIUM 5.8 CVE-2012-4842 Open redirect vulnerability in the web server in IBM Lotus Domino 8.5.x through 8.5.3 allows remote attackers to redirect users to arbitrary web site… Lotus Domino Mitigation only Fix from $1,6002013-02-27