Browse CVEs

HIGH 8.8 CVE-2016-5952 IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the… Kenexa Lcms Premier Patch available Fix from $1,9502017-02-01 MEDIUM 6.3 CVE-2016-5939 IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker… Kenexa Lms On Cloud Patch available Fix from $1,6002017-02-01 HIGH 8.8 CVE-2016-2873 SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQ… Qradar Security Information And Event Manager after 7.1.0 Fix from $1,9502016-11-30 MEDIUM 6.5 CVE-2016-2950 SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspeci… Bigfix Remote Control after 9.1.2 Fix from $1,6002016-11-30 HIGH 8.6 CVE-2016-0249 SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 be… Security Guardium after 8.2 Fix from $1,9502016-10-16 HIGH 8.8 CVE-2016-0233 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL… Marketing Platform Mitigation only Fix from $1,9502016-06-28 CRITICAL 9.8 CVE-2016-0224 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to execute arbitrary SQL commands … Marketing Platform Mitigation only Fix from $2,3002016-06-28 MEDIUM 5.4 CVE-2015-7448 SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX003, and 7.6.0 before 7.6.0.3 IFIX001; Maxi… Change And Configuration Management Database Mitigation only Fix from $1,6002016-03-12 MEDIUM 5.4 CVE-2015-5023 SQL injection vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1 allows remote authenticated users to execute arbitrary SQL comman… Curam Social Program Management Mitigation only Fix from $1,6002016-01-03 MEDIUM 5.4 CVE-2015-5049 SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated us… Openpages Grc Platform Mitigation only Fix from $1,6002016-01-01 MEDIUM 6.5 CVE-2015-1989 SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authenticated users to execute arbitra… Security Qradar Incident Forensics Mitigation only Fix from $1,6002015-11-08 MEDIUM 6.5 CVE-2015-4967 SQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX004, and 7.6.0 before 7.6.0.1 IFIX002; Maxi… Change And Configuration Management Database Patch available Fix from $1,6002015-10-06 MEDIUM 6.5 CVE-2015-0161 SQL injection vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authe… Security Siteprotector System Mitigation only Fix from $1,6002015-05-25 MEDIUM 6.5 CVE-2015-1889 The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restric… Infosphere Biginsights Mitigation only Fix from $1,6002015-04-22 MEDIUM 6.5 CVE-2014-6080 SQL injection vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and … Security Access Manager For Mobile Mitigation only Fix from $1,6002014-12-18 MEDIUM 6.5 CVE-2014-4824 SQL injection vulnerability in IBM Security QRadar SIEM 7.2 before 7.2.3 Patch 1 allows remote authenticated users to execute arbitrary SQL commands … Qradar Security Information And Event Manager Patch available Fix from $1,6002014-09-18 MEDIUM 6.5 CVE-2014-3041 SQL injection vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.… Emptoris Contract Management Mitigation only Fix from $1,6002014-08-26 MEDIUM 6.5 CVE-2014-0966 SQL injection vulnerability in the GDS component in IBM InfoSphere Master Data Management - Collaborative Edition 10.x and 11.x before 11.0-FP5 and I… Infosphere Master Data Management Mitigation only Fix from $1,6002014-08-17 HIGH 7.5 CVE-2014-3055 SQL injection vulnerability in the Unified Task List (UTL) Portlet for IBM WebSphere Portal 7.x and 8.x through 8.0.0.1 CF12 allows remote attackers … Websphere Portal Mitigation only Fix from $1,9502014-07-29 MEDIUM 6.5 CVE-2013-6311 SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecif… Marketing Platform Mitigation only Fix from $1,6002014-06-28 MEDIUM 6.5 CVE-2013-4016 SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 befor… Change And Configuration Management Database Mitigation only Fix from $1,6002014-05-26 MEDIUM 6.5 CVE-2013-4058 Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 all… Infosphere Information Server Mitigation only Fix from $1,6002014-03-16 MEDIUM 6.5 CVE-2013-6302 SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control … Algo One Mitigation only Fix from $1,6002014-03-05 MEDIUM 6.5 CVE-2013-6331 SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control … Algo One Mitigation only Fix from $1,6002014-03-05 HIGH 7.5 CVE-2013-6321 SQL injection vulnerability in IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier and 6.0.2, Disposal and Governance Management for IT 6.0.1… Atlas Ediscovery Process Management after 6.0.1.5 Fix from $1,9502014-01-10 MEDIUM 6.5 CVE-2013-5409 Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute a… Sterling B2b Integrator Mitigation only Fix from $1,6002013-12-21 MEDIUM 6.5 CVE-2013-0451 SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute ar… Maximo Asset Management Mitigation only Fix from $1,6002013-10-01 MEDIUM 6.5 CVE-2013-3973 SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute ar… Maximo Asset Management Mitigation only Fix from $1,6002013-10-01 MEDIUM 6.5 CVE-2013-4017 SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecif… Maximo Asset Management Mitigation only Fix from $1,6002013-10-01 MEDIUM 6.5 CVE-2013-3033 SQL injection vulnerability in the server component in IBM Tivoli Remote Control 5.1.2 before 5.1.2-TIV-TRC512-IF0015 allows remote authenticated use… Tivoli Remote Control Mitigation only Fix from $1,6002013-07-29