Browse CVEs

MEDIUM 5.4 CVE-2021-20477 IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Planning Analytics Mitigation only Fix from $1,6002021-06-29 MEDIUM 5.4 CVE-2021-29775 IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. Th… Business Automation Workflow Patch available Fix from $1,6002021-06-28 MEDIUM 5.4 CVE-2021-29677 IBM Security Verify (IBM Security Verify Privilege Vault 10.9.66) is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… Security Verify 10.9.66+ Fix from $1,6002021-06-25 MEDIUM 5.4 CVE-2020-5000 IBM Financial Transaction Manager 3.2.0 through 3.2.8 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS… Financial Transaction Manager Patch available Fix from $1,6002021-06-15 MEDIUM 5.4 CVE-2020-4977 IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary … Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2020-5030 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20338 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-29668 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-29670 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 HIGH 8.8 CVE-2020-4520 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim would exe… Cognos Analytics Patch available Fix from $1,9502021-06-01 MEDIUM 5.4 CVE-2019-4653 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Cognos Analytics Patch available Fix from $1,6002021-06-01 MEDIUM 5.4 CVE-2020-4354 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Cognos Analytics Patch available Fix from $1,6002021-06-01 MEDIUM 6.1 CVE-2021-20386 IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Security Guardium Patch available Fix from $1,6002021-05-24 MEDIUM 5.4 CVE-2021-20374 IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri… Maximo Asset Management Patch available Fix from $1,6002021-05-19 MEDIUM 5.4 CVE-2021-20528 IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Control Center Patch available Fix from $1,6002021-05-19 MEDIUM 6.1 CVE-2021-20392 IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java… Qradar User Behavior Analytics 4.1.0+ Fix from $1,6002021-05-14 MEDIUM 5.4 CVE-2020-4535 IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… Openpages Grc Platform 8.1.0.2+ Fix from $1,6002021-05-11 MEDIUM 6.1 CVE-2021-20577 IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS… Cloud Pak For Security Patch available Fix from $1,6002021-05-10 MEDIUM 5.4 CVE-2021-20559 IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… Control Desk Patch available Fix from $1,6002021-05-10 MEDIUM 6.1 CVE-2021-20397 IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… Qradar Security Information And Event Manager 7.3.3 / 7.4.2+ Fix from $1,6002021-05-05 MEDIUM 5.4 CVE-2020-4929 IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… Qradar Security Information And Event Manager 7.3.3 / 7.4.2+ Fix from $1,6002021-05-05 MEDIUM 5.4 CVE-2020-4987 The IBM FlashSystem 900 user management GUI is vulnerable to stored cross-site scripting in code versions 1.5.2.8 and prior and 1.6.1.2 and prior. Th… Flashsystem 900 Firmware 1.5.2.9 / 1.6.1.3+ Fix from $1,6002021-05-04 MEDIUM 5.4 CVE-2021-20448 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI … Content Navigator Patch available Fix from $1,6002021-04-27 MEDIUM 5.4 CVE-2021-20549 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI … Content Navigator Mitigation only Fix from $1,6002021-04-27 MEDIUM 5.4 CVE-2021-20550 IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI … Content Navigator Mitigation only Fix from $1,6002021-04-27 MEDIUM 5.4 CVE-2021-29666 IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar… Spectrum Scale after 5.1.0.2 Fix from $1,6002021-04-27 MEDIUM 5.4 CVE-2021-20519 IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… Collaborative Lifecycle Management Patch available Fix from $1,6002021-04-12 MEDIUM 5.4 CVE-2020-4920 IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… Collaborative Lifecycle Management Patch available Fix from $1,6002021-04-12 MEDIUM 5.4 CVE-2020-4792 IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th… Edge Application Manager Patch available Fix from $1,6002021-04-05 MEDIUM 5.4 CVE-2020-4997 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Infosphere Information Server Patch available Fix from $1,6002021-04-05