dbcve.org
Vulnerability index

Browse CVEs

1,094 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Datapower Gateway MEDIUM 6.1
CVE-2017-1591

IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…

Patch available
Fix from $1,600 2017-09-28
Business Process Manager MEDIUM 5.4
CVE-2017-1425

IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c…

Mitigation only
Fix from $1,600 2017-09-26
Business Process Manager MEDIUM 5.4
CVE-2017-1530

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c…

Patch available
Fix from $1,600 2017-09-26
Business Process Manager MEDIUM 5.4
CVE-2017-1531

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c…

Patch available
Fix from $1,600 2017-09-26
Business Process Manager MEDIUM 5.4
CVE-2017-1424

IBM Business Process Manager 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W…

Mitigation only
Fix from $1,600 2017-09-25
Curam Social Program Management MEDIUM 5.4
CVE-2014-6191

Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.0 SP2, 6.0.4, and 6.0.5 allows remote attackers to inject arbitrary…

Patch available
Fix from $1,600 2017-09-19
Websphere Portal MEDIUM 6.1
CVE-2017-1189

IBM WebSphere Portal and Web Content Manager 6.1, 7.0, and 8.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…

Mitigation only
Fix from $1,600 2017-09-07
Emptoris Supplier Lifecycle Management MEDIUM 5.4
CVE-2017-1098

IBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr…

Mitigation only
Fix from $1,600 2017-09-07
Content Navigator MEDIUM 5.4
CVE-2017-1502

IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc…

Mitigation only
Fix from $1,600 2017-09-07
Qradar Network Security MEDIUM 6.1
CVE-2017-1457

IBM QRadar Network Security 5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web …

Mitigation only
Fix from $1,600 2017-09-05
Emptoris Sourcing MEDIUM 5.4
CVE-2017-1444

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W…

Mitigation only
Fix from $1,600 2017-08-31
Emptoris Sourcing MEDIUM 5.4
CVE-2017-1447

IBM Emptoris Sourcing 9.5 - 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W…

Mitigation only
Fix from $1,600 2017-08-31
Emptoris Services Procurement MEDIUM 6.1
CVE-2017-1443

IBM Emptoris Services Procurement 10.0.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

Patch available
Fix from $1,600 2017-08-30
Emptoris Spend Analysis MEDIUM 5.4
CVE-2017-1445

IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri…

Mitigation only
Fix from $1,600 2017-08-30
Emptoris Spend Analysis MEDIUM 5.4
CVE-2017-1446

IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri…

Mitigation only
Fix from $1,600 2017-08-30
Cognos Analytics MEDIUM 6.1
CVE-2017-1427

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…

Patch available
Fix from $1,600 2017-08-29
Sametime MEDIUM 5.4
CVE-2016-2967

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime …

Patch available
Fix from $1,600 2017-08-29
Sametime MEDIUM 5.4
CVE-2016-2975

IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Patch available
Fix from $1,600 2017-08-29
Cognos Analytics MEDIUM 5.4
CVE-2017-1485

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…

Patch available
Fix from $1,600 2017-08-29
Cognos Analytics MEDIUM 5.4
CVE-2017-1535

IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…

Patch available
Fix from $1,600 2017-08-29
Sametime MEDIUM 5.4
CVE-2016-2973

IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i…

Patch available
Fix from $1,600 2017-08-29
Sametime MEDIUM 5.4
CVE-2016-2979

IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i…

Patch available
Fix from $1,600 2017-08-29
Curam Social Program Management MEDIUM 5.4
CVE-2016-9732

IBM Curam Social Program Management 6.0, 6.1, 6.2 and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J…

Patch available
Fix from $1,600 2017-08-29
Business Process Manager MEDIUM 6.1
CVE-2015-0101

Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, 8.5.x before 8.5.5; IBM Busin…

Mitigation only
Fix from $1,600 2017-08-28
Security Network Protection 4100 Firmware MEDIUM 6.1
CVE-2014-6189

Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.0.0-ISS-X…

Mitigation only
Fix from $1,600 2017-08-22
Rational Doors Next Generation MEDIUM 5.4
CVE-2017-1338

IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Patch available
Fix from $1,600 2017-08-18
Emptoris Strategic Supply Management MEDIUM 5.4
CVE-2016-6021

IBM Emptoris Strategic Supply Management Platform 10.0 and 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

Patch available
Fix from $1,600 2017-08-14
Rational Engineering Lifecycle Manager MEDIUM 5.4
CVE-2017-1168

IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

Patch available
Fix from $1,600 2017-08-10
Infosphere Streams MEDIUM 5.4
CVE-2017-1431

IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

Patch available
Fix from $1,600 2017-08-10
Emptoris Strategic Supply Management MEDIUM 5.4
CVE-2016-6121

IBM Emptoris Supplier Lifecycle Management 10.0.x and 10.1.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrar…

Mitigation only
Fix from $1,600 2017-08-09