Browse CVEs

HIGH 8.8 CVE-2020-4633 IBM Resilient SOAR V38.0 could allow a remote attacker to execute arbitrary code on the system, caused by formula injection due to improper input val… Resilient Security Orchestration Automation And Response Mitigation only Fix from $1,9502020-12-11 MEDIUM 5.4 CVE-2020-4704 IBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Content Navigator Mitigation only Fix from $1,6002020-11-10 MEDIUM 5.4 CVE-2020-4760 IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… Content Navigator Mitigation only Fix from $1,6002020-11-10 HIGH 7.5 CVE-2020-4254 IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt h… Security Guardium Big Data Intelligence Mitigation only Fix from $1,9502020-10-16 HIGH 7.2 CVE-2020-4636 IBM Resilient OnPrem 38.2 could allow a privileged user to inject malicious commands through Python3 scripting. IBM X-Force ID: 185503. Resilient Security Orchestration Automation And Response Mitigation only Fix from $1,9502020-10-16 HIGH 8.1 CVE-2020-4779 A HTTP Verb Tampering vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. By sending a specially-crafted request, an attac… Curam Social Program Management Mitigation only Fix from $1,9502020-10-12 HIGH 7.5 CVE-2020-4778 IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 c… Curam Social Program Management Mitigation only Fix from $1,9502020-10-12 MEDIUM 6.5 CVE-2020-4781 An improper input validation before calling java readLine() method may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could resul… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.3 CVE-2020-4780 OOTB build scripts does not set the secure attribute on session cookie which may impact IBM Curam Social Program Management 7.0.9 and 7.0,10. The pur… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 HIGH 8.1 CVE-2020-4772 An XML External Entity Injection (XXE) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. A remote attacker could exploit… Curam Social Program Management Mitigation only Fix from $1,9502020-10-12 HIGH 7.5 CVE-2020-4776 A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse direc… Curam Social Program Management Mitigation only Fix from $1,9502020-10-12 MEDIUM 6.5 CVE-2020-4773 A cross-site request forgery (CSRF) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which is an attack that forces a u… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.4 CVE-2020-4774 An XPath vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, caused by the improper handling of user-supplied input. By se… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.4 CVE-2020-4775 A cross-site scripting (XSS) vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10. This vulnerability allows attackers to in… Curam Social Program Management Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.3 CVE-2020-4660 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks… Security Access Manager Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.3 CVE-2020-4661 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks… Security Access Manager Mitigation only Fix from $1,6002020-10-12 MEDIUM 5.3 CVE-2020-4699 IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an attacker to obtain sensitive using timing side channel attacks… Security Access Manager Mitigation only Fix from $1,6002020-10-12 MEDIUM 6.1 CVE-2020-4727 IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a m… Infosphere Information Server Mitigation only Fix from $1,6002020-09-25 MEDIUM 5.3 CVE-2020-4531 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to obtain sens… Business Automation Workflow Mitigation only Fix from $1,6002020-09-25 MEDIUM 6.5 CVE-2020-4632 IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticat… Infosphere Metadata Asset Manager Mitigation only Fix from $1,6002020-09-04 MEDIUM 5.4 CVE-2020-4702 IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript co… Infosphere Information Server Mitigation only Fix from $1,6002020-09-04 MEDIUM 5.4 CVE-2020-4445 IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Doors Next Mitigation only Fix from $1,6002020-09-02 MEDIUM 5.4 CVE-2020-4522 IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Doors Next Mitigation only Fix from $1,6002020-09-02 MEDIUM 5.4 CVE-2020-4546 IBM Jazz Team Server based Applications are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Doors Next Mitigation only Fix from $1,6002020-09-02 MEDIUM 5.4 CVE-2012-3341 IBM InfoSphere Guardium 7.0, 8.0, 8.01, and 8.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote… Infosphere Guardium Mitigation only Fix from $1,6002020-09-01 MEDIUM 5.3 CVE-2012-3338 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to bypass security restrictions, caused by improper restrictions on the crea… Infosphere Guardium Mitigation only Fix from $1,6002020-09-01 MEDIUM 5.3 CVE-2012-3337 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-cr… Infosphere Guardium Mitigation only Fix from $1,6002020-09-01 HIGH 8.8 CVE-2012-3336 IBM InfoSphere Guardium 8.0, 8.01, and 8.2 is vulnerable to SQL injection. A remote authenticated attacker could send specially-crafted SQL statement… Infosphere Guardium Mitigation only Fix from $1,9502020-09-01 HIGH 7.8 CVE-2020-4587 IBM Sterling Connect:Direct for UNIX 4.2.0, 4.3.0, 6.0.0, and 6.1.0 is vulnerable to a stack based buffer ovreflow, caused by improper bounds checkin… Connect\ Mitigation only Fix from $1,9502020-08-24 MEDIUM 6.1 CVE-2020-4598 IBM Security Guardium Insights 2.0.1 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim… Security Guardium Insights Mitigation only Fix from $1,6002020-08-24