Vulnerability index

Browse CVEs

1,094 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Mobilefirst Platform Foundation MEDIUM 6.1
CVE-2017-1772

IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This vulnerability allows users to …

Patch available
Fix from $1,600 2018-04-04
Business Process Manager MEDIUM 5.4
CVE-2017-1767

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Patch available
Fix from $1,600 2018-03-30
Business Process Manager MEDIUM 5.4
CVE-2018-1384

IBM Business Process Manager 8.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Mitigation only
Fix from $1,600 2018-03-30
Financial Transaction Manager MEDIUM 5.4
CVE-2018-1390

IBM Financial Transaction Manager for Check Services for Multi-Platform 3.0, 3.0.2, and 3.0.2.1 is vulnerable to cross-site scripting. This vulnerabi…

Patch available
Fix from $1,600 2018-03-30
Infosphere Master Data Management MEDIUM 5.4
CVE-2015-7423

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, and…

Patch available
Fix from $1,600 2018-03-26
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1629

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows us…

Fix: after 6.0.5
Fix from $1,600 2018-03-23
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1655

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows us…

Fix: after 6.0.5
Fix from $1,600 2018-03-23
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1762

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 5.0 and 6.0) is vulnerable to cross-site scripting. This vulnerability allows us…

Fix: after 6.0.5
Fix from $1,600 2018-03-23
Mq Appliance MEDIUM 5.4
CVE-2018-1429

IBM MQ Appliance 9.0.1, 9.0.2, 9.0.3, amd 9.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

Patch available
Fix from $1,600 2018-03-23
Connections MEDIUM 5.4
CVE-2015-7460

Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbit…

Fix: after 3.0.1.1
Fix from $1,600 2018-03-20
Connections MEDIUM 5.4
CVE-2015-7458

Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbit…

Fix: after 3.0.1.1
Fix from $1,600 2018-03-20
Connections MEDIUM 5.4
CVE-2015-7459

Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbit…

Fix: after 3.0.1.1
Fix from $1,600 2018-03-20
Rational Collaborative Lifecycle Management MEDIUM 6.1
CVE-2015-7453

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1 before 3.0.1.6 iFix7 Interim Fix 1, 4.0.x bef…

Fix: after 6.0.1
Fix from $1,600 2018-03-15
Forms Server MEDIUM 6.1
CVE-2016-0223

Cross-site scripting (XSS) vulnerability in the Webform Framework API in IBM Forms Server 4.0.x, 8.0.x, 8.1, and 8.2 allows remote attackers to injec…

Patch available
Fix from $1,600 2018-03-15
Monitoring MEDIUM 6.1
CVE-2018-1441

IBM Application Performance Management - Response Time Monitoring Agent (IBM Monitoring 8.1.3 and 8.1.4) is vulnerable to cross-site scripting. This …

Patch available
Fix from $1,600 2018-03-14
Websphere Portal MEDIUM 5.4
CVE-2018-1444

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Patch available
Fix from $1,600 2018-03-14
Curam Social Program Management MEDIUM 5.4
CVE-2016-0261

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0.0 before SP2 EP29, 6.0.4 before 6.0.4.6 iFix3, 6.0.5 before 6.0.5…

Fix: after 6.0.5.9
Fix from $1,600 2018-03-12
Financial Transaction Manager MEDIUM 5.4
CVE-2016-0253

Cross-site scripting (XSS) vulnerability in IBM Financial Transaction Manager (FTM) for ACH Services for Multi-Platform 2.1.1.2 and 3.0.0.x before fp…

Fix: after 3.0.0.12
Fix from $1,600 2018-03-09
Websphere Portal MEDIUM 6.1
CVE-2018-1416

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…

Patch available
Fix from $1,600 2018-02-27
Daeja Viewone MEDIUM 5.4
CVE-2018-1399

IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbi…

Patch available
Fix from $1,600 2018-02-27
Maximo Asset Management MEDIUM 5.4
CVE-2018-1415

IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web …

Patch available
Fix from $1,600 2018-02-22
Rational Rhapsody Design Manager MEDIUM 5.4
CVE-2017-1462

IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t…

Patch available
Fix from $1,600 2018-02-21
Maximo Anywhere MEDIUM 5.4
CVE-2017-1604

IBM Maximo Anywhere 7.5 and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web …

Mitigation only
Fix from $1,600 2018-02-21
Tririga Application Platform MEDIUM 5.4
CVE-2016-0344

Cross-site scripting (XSS) vulnerability in the My Reports component in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.3, and …

Fix: 3.3.2.6+
Fix from $1,600 2018-02-21
Connections MEDIUM 5.4
CVE-2017-1682

IBM Connections 4.0, 4.5, 5.0, 5.5, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…

Patch available
Fix from $1,600 2018-02-14
Websphere Portal MEDIUM 6.1
CVE-2017-1761

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…

Patch available
Fix from $1,600 2018-02-09
Websphere Portal MEDIUM 6.1
CVE-2018-1401

IBM WebSphere Portal 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Patch available
Fix from $1,600 2018-02-09
Api Connect MEDIUM 5.4
CVE-2018-1382

IBM API Connect 5.0.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus …

Fix: after 5.0.6.4
Fix from $1,600 2018-02-07
Tivoli Integrated Portal MEDIUM 5.4
CVE-2016-0303

Cross-site scripting (XSS) vulnerability in IBM Tivoli Integrated Portal 2.2.0.0 through 2.2.0.15 allows remote attackers to inject arbitrary web scr…

Fix: after 2.2.0.15
Fix from $1,600 2018-02-02
Tivoli Business Service Manager MEDIUM 5.4
CVE-2016-0311

Cross-site scripting (XSS) vulnerability in IBM Tivoli Business Service Manager 6.1.0 before 6.1.0-TIV-BSM-FP0004 and 6.1.1 before 6.1.1-TIV-BSM-FP00…

Mitigation only
Fix from $1,600 2018-02-02