dbcve.org
Vulnerability index

Browse CVEs

1,094 matching
Cards Compact
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Cross-site Scripting (XSS)CWE-79 × clear
Top technology Linux 13140 Google 12525 Microsoft 12378 Apple 6692 Oracle 6673 Adobe 6383 Ibm 6286 Cisco 5751 Debian 3919 Mozilla 2886 Apache 2864 Redhat 2586
Security Guardium Key Lifecycle Manager MEDIUM 5.4
CVE-2023-47707

IBM Security Guardium Key Lifecycle Manager 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript …

Fix: after 4.2.0.2
Fix from $1,600 2023-12-20
Infosphere Information Server MEDIUM 5.4
CVE-2023-42022

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Fix: 11.7.1.0 / 11.7.1.4+
Fix from $1,600 2023-12-01
Infosphere Information Server MEDIUM 5.4
CVE-2023-46174

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Fix: 11.7.1.0 / 11.7.1.4+
Fix from $1,600 2023-12-01
Infosphere Information Server MEDIUM 5.4
CVE-2023-42009

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Fix: 11.7.1.0 / 11.7.1.4+
Fix from $1,600 2023-12-01
Infosphere Information Server MEDIUM 5.4
CVE-2023-43015

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t…

Fix: 11.7.1.0 / 11.7.1.4+
Fix from $1,600 2023-12-01
Cics Tx MEDIUM 6.1
CVE-2023-38364

IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu…

Patch available
Fix from $1,600 2023-11-13
Qradar Security Information And Event Manager MEDIUM 5.4
CVE-2023-43057

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al…

Mitigation only
Fix from $1,600 2023-11-11
Txseries For Multiplatforms MEDIUM 5.4
CVE-2023-42029

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerabil…

Patch available
Fix from $1,600 2023-11-03
Sterling Partner Engagement Manager MEDIUM 5.4
CVE-2023-38722

IBM Sterling Partner Engagement Manager 6.1.2, 6.2.0, and 6.2.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embe…

Patch available
Fix from $1,600 2023-10-23
Qradar Security Information And Event Manager MEDIUM 5.4
CVE-2023-40367

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al…

Patch available
Fix from $1,600 2023-10-14
Cloud Pak For Business Automation HIGH 7.6
CVE-2023-35024

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.…

Patch available
Fix from $1,950 2023-10-14
Content Navigator MEDIUM 5.4
CVE-2023-40684

IBM Content Navigator 3.0.11, 3.0.13, and 3.0.14 with IBM Daeja ViewOne Virtual is vulnerable to cross-site scripting. This vulnerability allows user…

Mitigation only
Fix from $1,600 2023-10-04
Filenet Content Manager MEDIUM 5.4
CVE-2023-35905

IBM FileNet Content Manager 5.5.8, 5.5.10, and 5.5.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS…

Patch available
Fix from $1,600 2023-10-04
Aspera Faspex MEDIUM 5.4
CVE-2022-22402

IBM Aspera Faspex 5.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus …

Fix: after 5.0.5
Fix from $1,600 2023-09-08
Maximo Application Suite MEDIUM 5.4
CVE-2023-32332

IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inj…

Mitigation only
Fix from $1,600 2023-09-08
Guardium Cloud Key Manager CRITICAL 9.8
CVE-2023-26270

IBM Security Guardium Data Encryption (IBM Guardium Cloud Key Manager (GCKM) 1.10.3)) could allow a remote attacker to execute arbitrary code on the …

Fix: after 1.10.3
Fix from $2,300 2023-08-28
Security Guardium MEDIUM 5.4
CVE-2022-43909

IBM Security Guardium 11.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th…

Patch available
Fix from $1,600 2023-08-27
Security Guardium MEDIUM 5.4
CVE-2023-30435

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip…

Patch available
Fix from $1,600 2023-08-27
Security Guardium MEDIUM 5.4
CVE-2023-30436

IBM Security Guardium 11.3, 11.4, and 11.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code …

Patch available
Fix from $1,600 2023-08-27
B2b Advanced Communications MEDIUM 5.4
CVE-2023-22595

IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 are vulnerable to cross-site scripting. This vulnerabili…

Fix: 1.0.0.8+
Fix from $1,600 2023-07-31
Cognos Analytics MEDIUM 5.4
CVE-2023-25929

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W…

Fix: 11.1.7 / 11.2.4+
Fix from $1,600 2023-07-22
Cognos Analytics MEDIUM 5.4
CVE-2023-28530

IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations.…

Fix: 11.1.7 / 11.2.4+
Fix from $1,600 2023-07-22
Cloud Object Storage System MEDIUM 5.4
CVE-2021-39014

IBM Cloud Object System 3.15.8.97 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in…

Fix: 3.15.8.106 / 3.16.0.47+
Fix from $1,600 2023-07-07
Qradar Security Information And Event Manager MEDIUM 5.4
CVE-2023-26274

IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al…

Patch available
Fix from $1,600 2023-06-27
Cloud Pak For Business Automation MEDIUM 6.1
CVE-2023-32339

IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web…

Patch available
Fix from $1,600 2023-06-27
Sterling Partner Engagement Manager MEDIUM 5.4
CVE-2023-23480

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary…

Fix: 6.1.2.8 / 6.2.0.6+
Fix from $1,600 2023-06-08
Sterling Partner Engagement Manager MEDIUM 5.4
CVE-2023-23481

IBM Sterling Partner Engagement Manager 6.1, 6.2, and 6.2.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed ar…

Fix: 6.1.2.8 / 6.2.0.6+
Fix from $1,600 2023-06-08
Txseries For Multiplatform MEDIUM 5.4
CVE-2023-33846

IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 is vulnerable to cross-site scripting. This vu…

Fix: 8.2.0.2 / 9.1.0.2+
Fix from $1,600 2023-06-08
Infosphere Information Server MEDIUM 5.4
CVE-2023-28529

IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co…

Patch available
Fix from $1,600 2023-05-19
Planning Analytics Local MEDIUM 5.4
CVE-2023-28520

IBM Planning Analytics Local 2.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in …

Patch available
Fix from $1,600 2023-05-12