Browse CVEs

HIGH 7.5 CVE-2024-41743 IBM TXSeries for Multiplatforms 10.1 could allow a remote attacker to cause a denial of service using persistent connections due to improper allocati… Txseries For Multiplatforms Mitigation only Fix from $1,9502025-01-19 HIGH 7.5 CVE-2024-45652 IBM Maximo MXAPIASSET API 7.6.1.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL… Maximo Asset Management Mitigation only Fix from $1,9502025-01-19 HIGH 7.5 CVE-2024-49354 IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls. Concert Mitigation only Fix from $1,9502025-01-18 CRITICAL 9.1 CVE-2024-47113 IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted X… Voice Gateway Mitigation only Fix from $2,3002025-01-18 HIGH 7.5 CVE-2024-52363 IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafte… Infosphere Information Server Mitigation only Fix from $1,9502025-01-17 MEDIUM 6.1 CVE-2024-41746 IBM CICS TX Advanced 10.1, 11.1, and Standard 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary J… Cics Tx Mitigation only Fix from $1,6002025-01-16 MEDIUM 5.4 CVE-2021-29669 IBM Jazz Foundation 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… Jazz Foundation Mitigation only Fix from $1,6002025-01-12 HIGH 8.1 CVE-2024-41787 IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race co… Doors Next Mitigation only Fix from $1,9502025-01-10 MEDIUM 5.4 CVE-2024-43176 IBM OpenPages 9.0 could allow an authenticated user to obtain sensitive information such as configurations that should only be available to privilege… Openpages With Watson Mitigation only Fix from $1,6002025-01-09 MEDIUM 5.5 CVE-2024-40679 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive informat… Db2 Mitigation only Fix from $1,6002025-01-08 MEDIUM 5.4 CVE-2024-52891 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow an authenticated user to inject malicious information or obtain informatio… Concert Mitigation only Fix from $1,6002025-01-07 MEDIUM 5.3 CVE-2024-52893 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3  could allow a remote attacker to obtain sensitive information when a detailed technica… Concert Mitigation only Fix from $1,6002025-01-07 HIGH 7.5 CVE-2024-52367 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could disclose sensitive system information to an unauthorized actor that could be used … Concert Mitigation only Fix from $1,9502025-01-07 MEDIUM 5.9 CVE-2024-52366 IBM Concert Software 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to … Concert Mitigation only Fix from $1,6002025-01-07 MEDIUM 6.5 CVE-2024-41768 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause an unhandled SSL exception which could lea… Engineering Lifecycle Optimization Publishing Mitigation only Fix from $1,6002025-01-04 HIGH 7.5 CVE-2024-41763 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 uses weaker than expected cryptographic algorithms that could allow an attacker … Engineering Lifecycle Optimization Publishing Mitigation only Fix from $1,9502025-01-04 HIGH 7.5 CVE-2024-41766 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to cause a denial of service using a complex regul… Engineering Lifecycle Optimization Publishing Mitigation only Fix from $1,9502025-01-04 HIGH 7.3 CVE-2024-41767 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 is vulnerable to SQL injection. A remote attacker could send specially crafted SQ… Engineering Lifecycle Optimization Publishing Mitigation only Fix from $1,9502025-01-04 MEDIUM 6.5 CVE-2024-41765 IBM Engineering Lifecycle Optimization - Publishing 7.0.2 and 7.0.3 could allow a remote attacker to traverse directories on the system. An attacker … Engineering Lifecycle Optimization Publishing Mitigation only Fix from $1,6002025-01-04 MEDIUM 5.4 CVE-2024-55896 IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames.  This vulnerability could allow an atta… I Mitigation only Fix from $1,6002025-01-03 HIGH 7.2 CVE-2024-54181 IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using sp… Websphere Automation Mitigation only Fix from $1,9502024-12-30 MEDIUM 5.5 CVE-2024-52906 IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a d… Vios Mitigation only Fix from $1,6002024-12-25 MEDIUM 5.5 CVE-2024-47102 IBM AIX 7.2, 7.3, VIOS 3.1, and 4.1 could allow a non-privileged local user to exploit a vulnerability in the AIX perfstat kernel extension to cause… Vios Mitigation only Fix from $1,6002024-12-25 CRITICAL 9.8 CVE-2024-39727 IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 uses a web link with untrusted references to an external site. A remote… Engineering Lifecycle Optimization Engineering Insights Mitigation only Fix from $2,3002024-12-25 MEDIUM 5.3 CVE-2024-39725 IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 could allow a remote attacker to obtain sensitive information when a de… Engineering Lifecycle Optimization Engineering Insights Mitigation only Fix from $1,6002024-12-25 MEDIUM 5.4 CVE-2024-51463 IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests… I Mitigation only Fix from $1,6002024-12-21 MEDIUM 5.4 CVE-2024-49336 IBM Security Guardium 11.5 and 12.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorize… Security Guardium Mitigation only Fix from $1,6002024-12-19 MEDIUM 6.5 CVE-2023-30443 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted qu… Db2 Mitigation only Fix from $1,6002024-12-19 HIGH 7.5 CVE-2021-39081 IBM Cognos Analytics Mobile for Android 1.1.14 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sens… Cognos Analytics Mobile Mitigation only Fix from $1,9502024-12-19 MEDIUM 5.2 CVE-2021-29827 IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a m… Infosphere Information Server Mitigation only Fix from $1,6002024-12-19