Browse CVEs

MEDIUM 6.1 CVE-2017-1506 IBM Cognos TM1 10.2 and 10.2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… Cognos Tm1 Patch available Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2017-1532 IBM DOORS 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus al… Engineering Requirements Management Doors after 9.6.1.9 Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2017-1540 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Engineering Requirements Management Doors after 9.6.1.9 Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2017-1563 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Engineering Requirements Management Doors after 9.6.1.9 Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2017-1567 IBM Doors Web Access 9.5 and 9.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Engineering Requirements Management Doors after 9.6.1.9 Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2017-1653 IBM Jazz Foundation (IBM Rational Collaborative Lifecycle Management 6.0.x) is vulnerable to cross-site scripting. This vulnerability allows users to… Rational Collaborative Lifecycle Management after 6.0.4 Fix from $1,6002018-01-26 MEDIUM 5.4 CVE-2015-7474 Cross-site scripting (XSS) vulnerability in Jazz Foundation in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0… Rational Engineering Lifecycle Manager after 6.0.1 Fix from $1,6002018-01-16 MEDIUM 5.4 CVE-2015-7485 Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix1… Rational Engineering Lifecycle Manager after 6.0.1 Fix from $1,6002018-01-16 MEDIUM 5.4 CVE-2015-7486 Cross-site scripting (XSS) vulnerability in IBM Rational Engineering Lifecycle Manager 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix1… Rational Engineering Lifecycle Manager after 6.0.1 Fix from $1,6002018-01-16 MEDIUM 5.4 CVE-2016-0336 Cross-site scripting (XSS) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP000… Security Identity Manager Patch available Fix from $1,6002018-01-12 MEDIUM 6.1 CVE-2018-1361 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Websphere Portal Patch available Fix from $1,6002018-01-11 MEDIUM 5.4 CVE-2017-1739 IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar… Curam Social Program Management Patch available Fix from $1,6002018-01-11 MEDIUM 5.4 CVE-2017-1740 IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to e… Curam Social Program Management Patch available Fix from $1,6002018-01-11 MEDIUM 6.1 CVE-2017-1623 IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002018-01-10 MEDIUM 6.1 CVE-2017-1533 IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code… Security Access Manager 9.0 Firmware Mitigation only Fix from $1,6002018-01-10 MEDIUM 6.1 CVE-2017-1673 IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScri… Security Key Lifecycle Manager Mitigation only Fix from $1,6002018-01-04 MEDIUM 5.4 CVE-2017-1365 IBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6.0) is vulnerable to cross-site scripting. This vulne… Rational Collaborative Lifecycle Management after 6.0.4 Fix from $1,6002017-12-27 MEDIUM 5.4 CVE-2017-1600 IBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc… Security Guardium Mitigation only Fix from $1,6002017-12-20 MEDIUM 5.4 CVE-2017-1751 IBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr… Robotic Process Automation With Automation Anywhere Mitigation only Fix from $1,6002017-12-20 MEDIUM 5.4 CVE-2017-1494 IBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Business Process Manager Mitigation only Fix from $1,6002017-12-20 MEDIUM 6.1 CVE-2017-1421 IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the … Inotes Mitigation only Fix from $1,6002017-12-13 MEDIUM 5.4 CVE-2017-1546 IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Java… Rational Doors Next Generation Mitigation only Fix from $1,6002017-12-13 MEDIUM 5.4 CVE-2017-1536 IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting. This vulnerability allows users t… Websphere Portal Mitigation only Fix from $1,6002017-12-11 MEDIUM 5.4 CVE-2017-1549 IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Sterling File Gateway Mitigation only Fix from $1,6002017-12-11 MEDIUM 5.4 CVE-2017-1632 IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Sterling File Gateway Mitigation only Fix from $1,6002017-12-11 MEDIUM 5.4 CVE-2017-1683 IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… Connections Engagement Center Mitigation only Fix from $1,6002017-12-11 MEDIUM 5.4 CVE-2017-1482 IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… Sterling B2b Integrator Mitigation only Fix from $1,6002017-12-07 MEDIUM 5.4 CVE-2017-1498 IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte… Connections Mitigation only Fix from $1,6002017-12-07 MEDIUM 5.4 CVE-2017-1354 IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… Atlas Ediscovery Process Management Mitigation only Fix from $1,6002017-12-07 MEDIUM 5.4 CVE-2017-1465 IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malic… Tririga Application Platform Mitigation only Fix from $1,6002017-12-07