dbcve.org
Vulnerability index

Browse CVEs

1,094 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Robotic Process Automation With Automation Anywhere MEDIUM 5.4
CVE-2018-1908

IBM Robotic Process Automation with Automation Anywhere 11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary …

Fix: 11.0.0.2+
Fix from $1,600 2019-03-14
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2018-1910

IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

Fix: after 6.0.6
Fix from $1,600 2019-03-14
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2018-1914

IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

Fix: after 6.0.6
Fix from $1,600 2019-03-14
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2018-1916

IBM Jazz Foundation (IBM Rational Engineering Lifecycle Manager 5.0 through 6.0.6) is vulnerable to cross-site scripting. This vulnerability allows u…

Fix: after 6.0.6
Fix from $1,600 2019-03-14
Rational Doors Next Generation MEDIUM 5.4
CVE-2018-1911

IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to…

Fix: after 6.0.6
Fix from $1,600 2019-03-06
Rational Doors Next Generation MEDIUM 5.4
CVE-2018-1912

IBM DOORS Next Generation (DNG/RRC) 6.0.2 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

Fix: after 6.0.6
Fix from $1,600 2019-03-06
Websphere Application Server MEDIUM 5.4
CVE-2019-4030

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod…

Fix: after 9.0.0.10
Fix from $1,600 2019-03-06
Sterling B2b Integrator MEDIUM 5.4
CVE-2019-4027

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr…

Fix: after 6.0.0.0
Fix from $1,600 2019-03-05
Sterling B2b Integrator MEDIUM 5.4
CVE-2019-4028

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr…

Fix: after 6.0.0.0
Fix from $1,600 2019-03-05
Sterling B2b Integrator MEDIUM 5.4
CVE-2019-4029

IBM Sterling B2B Integrator 5.2.0.1 through 6.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr…

Fix: after 6.0.0.0
Fix from $1,600 2019-03-05
Security Identity Governance And Intelligence MEDIUM 6.1
CVE-2018-1947

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance is vulnerable to cross-site scripting. This vulnerability all…

Fix: after 5.2.4.1
Fix from $1,600 2019-02-21
Infosphere Information Governance Catalog MEDIUM 5.4
CVE-2018-1895

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

Mitigation only
Fix from $1,600 2019-02-15
I MEDIUM 6.1
CVE-2019-4040

IBM I 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alteri…

Mitigation only
Fix from $1,600 2019-01-31
Spss Analytic Server MEDIUM 5.4
CVE-2018-1772

IBM SPSS Analytic Server 3.1.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Mitigation only
Fix from $1,600 2019-01-15
Security Identity Manager MEDIUM 6.1
CVE-2018-1967

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the …

Fix: after 6.0.0.20
Fix from $1,600 2019-01-14
Jazz Reporting Service MEDIUM 5.4
CVE-2018-1918

IBM Jazz Reporting Service (JRS) 6.0.3, 6.0.4, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

Fix: after 6.0.6
Fix from $1,600 2019-01-08
Engineering Lifecycle Optimization Publishing MEDIUM 5.4
CVE-2018-1657

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co…

Patch available
Fix from $1,600 2019-01-04
Engineering Lifecycle Optimization Publishing MEDIUM 5.4
CVE-2018-1951

IBM Publishing Engine 2.1.2, 6.0.5, and 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co…

Patch available
Fix from $1,600 2019-01-04
Security Guardium MEDIUM 5.4
CVE-2018-1889

IBM Security Guardium 10.0 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the …

Fix: after 10.5
Fix from $1,600 2018-12-17
Security Guardium MEDIUM 5.4
CVE-2018-1891

IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We…

Fix: after 10.5
Fix from $1,600 2018-12-17
Business Automation Workflow MEDIUM 6.1
CVE-2018-1848

IBM Business Automation Workflow 18.0.0.0 and 18.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

Fix: after 8.5.0.2
Fix from $1,600 2018-12-14
Security Guardium MEDIUM 6.1
CVE-2018-1817

IBM Security Guardium 10 and 10.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We…

Fix: after 10.5
Fix from $1,600 2018-12-13
Security Access Manager MEDIUM 6.1
CVE-2018-1815

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 for Enterprise Single-Sign On is vulnerable to cross-site scrip…

Fix: after 9.0.5.0
Fix from $1,600 2018-12-13
Security Access Manager MEDIUM 5.4
CVE-2018-1653

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allow…

Fix: after 9.0.5.0
Fix from $1,600 2018-12-13
Datapower Gateway MEDIUM 5.4
CVE-2018-1667

IBM DataPower Gateway 7.6.0.0 through 7.6.0.10, 7.5.2.0 through 7.5.2.17, 7.5.1.0 through 7.5.1.17, 7.5.0.0 through 7.5.0.18, and 7.7.0.0 through 7.7…

Fix: after 7.7.1.3
Fix from $1,600 2018-12-13
Security Access Manager MEDIUM 5.4
CVE-2018-1740

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 is vulnerable to cross-site scripting. This vulnerability allow…

Fix: after 9.0.5.0
Fix from $1,600 2018-12-13
Curam Social Program Management MEDIUM 5.4
CVE-2018-1900

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to e…

Fix: after 7.0.4.0
Fix from $1,600 2018-12-11
Curam Social Program Management MEDIUM 6.1
CVE-2018-1671

IBM Curam Social Program Management 7.0.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, wou…

Patch available
Fix from $1,600 2018-12-10
Financial Transaction Manager MEDIUM 5.4
CVE-2018-1871

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cross-site scripting. This vulnera…

Patch available
Fix from $1,600 2018-12-06
Qradar Incident Forensics MEDIUM 5.4
CVE-2018-1728

IBM QRadar SIEM 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t…

Fix: 7.2.8 / 7.3.1+
Fix from $1,600 2018-12-05