Vulnerability index

Browse CVEs

138 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness SQL InjectionCWE-89 × clear
Sterling B2b Integrator MEDIUM 6.5
CVE-2013-0560

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated us…

Mitigation only
Fix from $1,600 2013-07-03
Sterling B2b Integrator MEDIUM 6.5
CVE-2012-5766

Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated us…

Mitigation only
Fix from $1,600 2013-07-03
Infosphere Optim Data Growth For Oracle E Business Suite HIGH 7.5
CVE-2013-2956

SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows re…

Mitigation only
Fix from $1,950 2013-05-27
Security Appscan MEDIUM 6.5
CVE-2013-0511

Multiple SQL injection vulnerabilities in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 allow remote authenticated users to execute arbitrar…

Mitigation only
Fix from $1,600 2013-03-29
Netezza MEDIUM 6.5
CVE-2012-5760

SQL injection vulnerability in the WebAdmin application 6.0.5, 6.0.8, and 7.0 before P2 in IBM Netezza allows remote authenticated users to execute a…

Mitigation only
Fix from $1,600 2013-02-20
Change And Configuration Management Database MEDIUM 6.5
CVE-2012-0727

SQL injection vulnerability in IBM Maximo Asset Management 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Re…

Mitigation only
Fix from $1,600 2012-09-10
Change And Configuration Management Database MEDIUM 6.5
CVE-2012-0728

SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivol…

Mitigation only
Fix from $1,600 2012-09-10
Change And Configuration Management Database MEDIUM 6.5
CVE-2012-0747

SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivol…

Mitigation only
Fix from $1,600 2012-09-10
Ds Storage Manager Host Software MEDIUM 6.5
CVE-2012-2171EPSS 5%

SQL injection vulnerability in ModuleServlet.do in the Storage Manager Profiler in IBM System Storage DS Storage Manager before 10.83.xx.18 on DS Ser…

Fix: after 10.83
Fix from $1,600 2012-06-22
Rational Clearquest HIGH 7.5
CVE-2011-1390

SQL injection vulnerability in the Maintenance tool in IBM Rational ClearQuest 7.1.1.x before 7.1.1.9, 7.1.2.x before 7.1.2.6, and 8.x before 8.0.0.2…

Mitigation only
Fix from $1,950 2012-05-14
Maximo Asset Management MEDIUM 6.5
CVE-2011-4816

SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset M…

Mitigation only
Fix from $1,600 2012-03-13
Tivoli Provisioning Manager Express For Software Distribution HIGH 7.5
CVE-2012-0199

Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute a…

Mitigation only
Fix from $1,950 2012-03-06
Datacap Taskmaster Capture HIGH 7.5
CVE-2011-2141

SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via…

Mitigation only
Fix from $1,950 2011-05-16
Tivoli Netcool\/omnibus HIGH 7.5
CVE-2011-1343

SQL injection vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus before 7.3.0.4 allows remote attackers to execute arbitrary SQL commands via…

Fix: after 7.2.1.10
Fix from $1,950 2011-03-09
Websphere Commerce MEDIUM 6.5
CVE-2010-2635

SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via uns…

Mitigation only
Fix from $1,600 2010-11-09
Websphere Partner Gateway MEDIUM 6.5
CVE-2009-2093

SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.…

Patch available
Fix from $1,600 2009-08-13
Lotus Connections HIGH 7.5
CVE-2008-4806

Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sor…

Fix: after 2.0
Fix from $1,950 2008-10-31
Rational Clearquest HIGH 7.5
CVE-2007-4368

SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbitrary SQL …

No fix yet
Fix from $1,950 2007-08-15