Browse CVEs

MEDIUM 6.1 CVE-2021-39036 IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Cognos Analytics Mitigation only Fix from $1,6002023-05-12 MEDIUM 5.4 CVE-2023-24957 IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 i… Business Automation Workflow 21.0.3 / 22.0.2+ Fix from $1,6002023-05-06 MEDIUM 5.4 CVE-2022-43866 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript … Maximo Asset Management Mitigation only Fix from $1,6002023-05-05 MEDIUM 6.4 CVE-2023-23470 IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in non-default configurations, as a re… I Mitigation only Fix from $1,6002023-05-04 MEDIUM 5.4 CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary … Financial Transaction Manager For Multiplatform Mitigation only Fix from $1,6002023-04-29 MEDIUM 5.4 CVE-2023-27864 IBM Maximo Asset Management 7.6.1.2 and 7.6.1.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewe… Maximo Asset Management Patch available Fix from $1,6002023-04-28 MEDIUM 6.1 CVE-2023-24966 IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod… Websphere Application Server 8.5.5.24 / 9.0.5.16+ Fix from $1,6002023-04-27 MEDIUM 5.4 CVE-2022-43914 IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… Tririga Application Platform 4.0.3+ Fix from $1,6002023-04-07 MEDIUM 5.4 CVE-2023-26283 IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… Websphere Application Server Patch available Fix from $1,6002023-04-02 MEDIUM 6.1 CVE-2022-43874 IBM App Connect Enterprise Certified Container 4.1, 4.2, 5.0, 5.1, 5.2, 6.0, 6.1, 6.2, and 7.0 is vulnerable to cross-site scripting. This vulnerabil… App Connect Enterprise Certified Container Mitigation only Fix from $1,6002023-03-15 MEDIUM 5.4 CVE-2022-35645 IBM Maximo Asset Management 7.6.1.1, 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8 and 8.9 is vulnerable to stored cross-site scripting. This… Maximo Application Suite Patch available Fix from $1,6002023-03-02 MEDIUM 5.4 CVE-2023-22860 IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.… Cloud Pak For Business Automation Patch available Fix from $1,6002023-02-27 MEDIUM 5.4 CVE-2022-43578 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerab… Sterling B2b Integrator after 6.1.2.0 Fix from $1,6002023-02-22 MEDIUM 5.4 CVE-2023-25928 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Infosphere Information Server Patch available Fix from $1,6002023-02-21 MEDIUM 5.4 CVE-2022-43579 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerab… Sterling B2b Integrator after 6.1.2.0 Fix from $1,6002023-02-17 MEDIUM 5.4 CVE-2023-22868 IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus … Aspera Faspex after 4.4.1 Fix from $1,6002023-02-17 MEDIUM 5.4 CVE-2022-47983 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Infosphere Information Server Patch available Fix from $1,6002023-02-01 MEDIUM 5.4 CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed a… Robotic Process Automation 21.0.5+ Fix from $1,6002023-01-18 MEDIUM 6.1 CVE-2022-34330 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed … Sterling B2b Integrator after 6.1.1.2 Fix from $1,6002023-01-05 MEDIUM 5.4 CVE-2022-22352 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed … Sterling B2b Integrator 6.0.3.7 / 6.1.0.6+ Fix from $1,6002023-01-04 MEDIUM 6.1 CVE-2022-22456 IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav… Security Verify Governance Patch available Fix from $1,6002022-12-22 MEDIUM 6.1 CVE-2022-39160 IBM Cognos Analytics 11.2.1, 11.2.0, and 11.1.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript … Cognos Analytics 11.1.7+ Fix from $1,6002022-12-19 MEDIUM 5.4 CVE-2022-41299 IBM Cloud Transformation Advisor 2.0.1 through 3.3.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc… Transformation Advisor 3.4.0+ Fix from $1,6002022-12-09 MEDIUM 6.1 CVE-2022-41735 IBM Business Process Manager 21.0.1 through 21.0.3.1, 20.0.0.1 through 20.0.0.2 19.0.0.1 through 19.0.0.3 is vulnerable to cross-site scripting. This… Business Automation Workflow after 21.0.3.1 Fix from $1,6002022-12-07 MEDIUM 5.4 CVE-2022-38390 Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScr… Business Automation Workflow after 21.0.3.1 Fix from $1,6002022-11-17 MEDIUM 5.4 CVE-2022-40753 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Infosphere Information Server Patch available Fix from $1,6002022-11-15 MEDIUM 5.4 CVE-2022-34317 IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin… Cics Tx Patch available Fix from $1,6002022-11-14 MEDIUM 5.4 CVE-2022-34315 IBM CICS TX 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alterin… Cics Tx Patch available Fix from $1,6002022-11-14 MEDIUM 5.4 CVE-2022-40750 IBM WebSphere Application Server 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… Websphere Application Server Patch available Fix from $1,6002022-11-11 MEDIUM 5.4 CVE-2022-36776 IBM Cloud Pak for Security (CP4S) 1.10.0.0 79and 1.10.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… Cloud Pak For Security after 1.10.2.0 Fix from $1,6002022-11-11