Browse CVEs

MEDIUM 5.4 CVE-2020-4663 IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary … Engineering Requirements Quality Assistant On Premises Patch available Fix from $1,6002021-01-08 MEDIUM 5.4 CVE-2020-4664 IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary … Engineering Requirements Quality Assistant On Premises Patch available Fix from $1,6002021-01-08 MEDIUM 5.4 CVE-2020-4666 IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary … Engineering Requirements Quality Assistant On Premises Patch available Fix from $1,6002021-01-08 MEDIUM 5.4 CVE-2020-4892 IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in … Emptoris Contract Management 10.1.3.30+ Fix from $1,6002021-01-07 MEDIUM 5.4 CVE-2020-4895 IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to … Emptoris Strategic Supply Management 10.1.0.38 / 10.1.1.35+ Fix from $1,6002021-01-07 MEDIUM 6.4 CVE-2020-4757 IBM FileNet Content Manager and IBM Content Navigator 3.0.CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed a… Content Navigator Patch available Fix from $1,6002020-12-21 MEDIUM 5.4 CVE-2020-4845 IBM Security Key Lifecycle Manager 3.0.1 and 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… Security Key Lifecycle Manager 3.0.1.5 / 4.0.0.2+ Fix from $1,6002020-12-17 MEDIUM 6.1 CVE-2020-4657 IBM Sterling B2B Integrator 5.2.0.0 through 6.0.3.2 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed … Sterling B2b Integrator after 6.0.3.2 Fix from $1,6002020-12-16 MEDIUM 6.1 CVE-2020-4658 IBM Sterling File Gateway 2.2.0.0 through 6.0.3.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Sterling File Gateway after 6.0.3.2 Fix from $1,6002020-12-16 MEDIUM 5.4 CVE-2020-4718 IBM Jazz Reporting Service 6.0.6, 6.0.6.1, 7.0, and 7.0.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbi… Jazz Reporting Service Patch available Fix from $1,6002020-11-19 MEDIUM 5.4 CVE-2020-4672 IBM Business Automation Workflow 20.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i… Business Automation Workflow Patch available Fix from $1,6002020-11-16 MEDIUM 5.4 CVE-2020-4704 IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Content Navigator Mitigation only Fix from $1,6002020-11-10 MEDIUM 5.4 CVE-2020-4760 IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… Content Navigator Mitigation only Fix from $1,6002020-11-10 MEDIUM 6.1 CVE-2020-4748 IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Spectrum Scale after 5.0.5.2 Fix from $1,6002020-10-20 MEDIUM 5.4 CVE-2020-4564 IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-si… Sterling B2b Integrator after 6.0.3.1 Fix from $1,6002020-10-20 MEDIUM 5.4 CVE-2020-4755 IBM Spectrum Scale 5.0.0 through 5.0.5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Spectrum Scale after 5.0.5.2 Fix from $1,6002020-10-20 MEDIUM 5.4 CVE-2020-4741 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary Java… Infosphere Information Server Patch available Fix from $1,6002020-10-12 MEDIUM 5.2 CVE-2020-4740 IBM InfoSphere Information Server 11.5 and 11.7 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewe… Infosphere Information Server Patch available Fix from $1,6002020-10-12 MEDIUM 5.4 CVE-2020-4680 IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Security Guardium Patch available Fix from $1,6002020-10-12 MEDIUM 5.4 CVE-2020-4681 IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Security Guardium Patch available Fix from $1,6002020-10-12 MEDIUM 5.4 CVE-2020-4775 A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to in… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 MEDIUM 6.1 CVE-2019-4725 IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code i… Security Access Manager 9.0.7.0+ Fix from $1,6002020-10-06 MEDIUM 5.4 CVE-2020-4615 IBM Data Risk Manager (iDNA) 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Data Risk Manager 2.0.6.4+ Fix from $1,6002020-09-22 MEDIUM 6.1 CVE-2020-4731 IBM Aspera Web Application 1.9.14 PL1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… Aspera Shares after 1.9.14 Fix from $1,6002020-09-21 MEDIUM 6.1 CVE-2020-8339 A cross-site scripting inclusion (XSSI) vulnerability was reported in the legacy IBM BladeCenter Advanced Management Module (AMM) web interface prior… Bladecenter Advanced Management Module Firmware 3.68n+ Fix from $1,6002020-09-15 MEDIUM 5.4 CVE-2020-4530 IBM Business Automation Workflow C.D.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 are vulnerable to cross-site scripting. This vulnerability … Business Automation Workflow 8.0.1.0 / 8.5.7.0+ Fix from $1,6002020-09-15 MEDIUM 5.4 CVE-2020-4578 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav… Websphere Application Server after 9.0.5.5 Fix from $1,6002020-09-10 MEDIUM 5.4 CVE-2020-4516 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerab… Business Automation Workflow Patch available Fix from $1,6002020-09-08 MEDIUM 5.4 CVE-2020-4698 IBM Business Process Manager 8.5, 8.6 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to stored cross-site scripting. This v… Business Automation Workflow Patch available Fix from $1,6002020-09-08 MEDIUM 5.4 CVE-2020-4702 IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… Infosphere Information Server Mitigation only Fix from $1,6002020-09-04