Vulnerability index

Browse CVEs

1,094 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Cognos Tm1 MEDIUM 6.1
CVE-2017-1506

IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U…

Patch available
Fix from $1,600 2018-01-26
Engineering Requirements Management Doors MEDIUM 5.4
CVE-2017-1532

IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al…

Fix: after 9.6.1.9
Fix from $1,600 2018-01-26
Engineering Requirements Management Doors MEDIUM 5.4
CVE-2017-1540

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Fix: after 9.6.1.9
Fix from $1,600 2018-01-26
Engineering Requirements Management Doors MEDIUM 5.4
CVE-2017-1563

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Fix: after 9.6.1.9
Fix from $1,600 2018-01-26
Engineering Requirements Management Doors MEDIUM 5.4
CVE-2017-1567

IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Fix: after 9.6.1.9
Fix from $1,600 2018-01-26
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1653

IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting. This vulnerability allows users to…

Fix: after 6.0.4
Fix from $1,600 2018-01-26
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2015-7474

Cross-site scripting (XSS) vulnerability in Jazz Foundation in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0…

Fix: after 6.0.1
Fix from $1,600 2018-01-16
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2015-7485

Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix1…

Fix: after 6.0.1
Fix from $1,600 2018-01-16
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2015-7486

Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix1…

Fix: after 6.0.1
Fix from $1,600 2018-01-16
Security Identity Manager MEDIUM 5.4
CVE-2016-0336

Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP000…

Patch available
Fix from $1,600 2018-01-12
Websphere Portal MEDIUM 6.1
CVE-2018-1361

IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Patch available
Fix from $1,600 2018-01-11
Curam Social Program Management MEDIUM 5.4
CVE-2017-1739

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar…

Patch available
Fix from $1,600 2018-01-11
Curam Social Program Management MEDIUM 5.4
CVE-2017-1740

IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to e…

Patch available
Fix from $1,600 2018-01-11
Qradar Security Information And Event Manager MEDIUM 6.1
CVE-2017-1623

IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a…

Mitigation only
Fix from $1,600 2018-01-10
Security Access Manager 9.0 Firmware MEDIUM 6.1
CVE-2017-1533

IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code…

Mitigation only
Fix from $1,600 2018-01-10
Security Key Lifecycle Manager MEDIUM 6.1
CVE-2017-1673

IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri…

Mitigation only
Fix from $1,600 2018-01-04
Rational Collaborative Lifecycle Management MEDIUM 5.4
CVE-2017-1365

IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulne…

Fix: after 6.0.4
Fix from $1,600 2017-12-27
Security Guardium MEDIUM 5.4
CVE-2017-1600

IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…

Mitigation only
Fix from $1,600 2017-12-20
Robotic Process Automation With Automation Anywhere MEDIUM 5.4
CVE-2017-1751

IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

Mitigation only
Fix from $1,600 2017-12-20
Business Process Manager MEDIUM 5.4
CVE-2017-1494

IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Mitigation only
Fix from $1,600 2017-12-20
Inotes MEDIUM 6.1
CVE-2017-1421

IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the …

Mitigation only
Fix from $1,600 2017-12-13
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1546

IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java…

Mitigation only
Fix from $1,600 2017-12-13
Websphere Portal MEDIUM 5.4
CVE-2017-1536

IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users t…

Mitigation only
Fix from $1,600 2017-12-11
Sterling File Gateway MEDIUM 5.4
CVE-2017-1549

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…

Mitigation only
Fix from $1,600 2017-12-11
Sterling File Gateway MEDIUM 5.4
CVE-2017-1632

IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI…

Mitigation only
Fix from $1,600 2017-12-11
Connections Engagement Center MEDIUM 5.4
CVE-2017-1683

IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th…

Mitigation only
Fix from $1,600 2017-12-11
Sterling B2b Integrator MEDIUM 5.4
CVE-2017-1482

IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript…

Mitigation only
Fix from $1,600 2017-12-07
Connections MEDIUM 5.4
CVE-2017-1498

IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte…

Mitigation only
Fix from $1,600 2017-12-07
Atlas Ediscovery Process Management MEDIUM 5.4
CVE-2017-1354

IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co…

Mitigation only
Fix from $1,600 2017-12-07
Tririga Application Platform MEDIUM 5.4
CVE-2017-1465

IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malic…

Mitigation only
Fix from $1,600 2017-12-07