Browse CVEs

MEDIUM 5.4 CVE-2020-4165 IBM Security Guardium Insights 2.0.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a mal… Security Guardium Insights Mitigation only Fix from $1,6002020-08-24 HIGH 8.2 CVE-2020-4481 IBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML … Urbancode Deploy Mitigation only Fix from $1,9502020-08-05 MEDIUM 6.1 CVE-2020-4560 IBM Financial Transaction Manager 3.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in … Financial Transaction Manager Mitigation only Fix from $1,6002020-08-03 CRITICAL 9.1 CVE-2020-4377 IBM Cognos Anaytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could ex… Cognos Analytics Mitigation only Fix from $2,3002020-08-03 HIGH 8.8 CVE-2020-4534 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local authenticated attacker to gain elevated privileges on the system, caused … Websphere Application Server Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4549 IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a vi… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4550 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persu… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4551 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persu… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4552 IBM i2 Analyst Notebook 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persuading a vi… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4553 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persu… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 HIGH 7.8 CVE-2020-4554 IBM i2 Analyst Notebook 9.2.1 and 9.2.2 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By persu… I2 Analysts Notebook Mitigation only Fix from $1,9502020-08-03 MEDIUM 6.3 CVE-2020-4328 IBM Financial Transaction Manager 3.2.4 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could al… Financial Transaction Manager For Multiplatform Mitigation only Fix from $1,6002020-08-03 MEDIUM 5.3 CVE-2019-4366 IBM Cognos Analytics 11.0 and 11.1 is susceptible to an information disclosure vulnerability where an attacker could gain access to cached browser da… Cognos Analytics Mitigation only Fix from $1,6002020-08-03 HIGH 8.2 CVE-2020-4462 IBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 are vulnera… Sterling External Authentication Server Mitigation only Fix from $1,9502020-07-16 MEDIUM 5.4 CVE-2020-4557 IBM Business Automation Workflow 18.0, 19.0, and 20.0 and IBM Business Process Manager 8.5 and 8.6 are vulnerable to cross-site scripting. This vulne… Business Automation Workflow Mitigation only Fix from $1,6002020-06-29 MEDIUM 6.3 CVE-2019-4650 IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow … Maximo Asset Management Mitigation only Fix from $1,6002020-06-26 MEDIUM 5.4 CVE-2020-4223 IBM Maximo Asset Management 7.6.0.10 and 7.6.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript… Maximo Asset Management Mitigation only Fix from $1,6002020-06-26 MEDIUM 5.3 CVE-2020-4188 IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM … Security Guardium Mitigation only Fix from $1,6002020-06-23 MEDIUM 5.4 CVE-2020-4281 IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar… Doors Next Mitigation only Fix from $1,6002020-06-19 MEDIUM 5.4 CVE-2020-4295 IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar… Doors Next Mitigation only Fix from $1,6002020-06-19 MEDIUM 5.4 CVE-2020-4297 IBM DOORS Next Generation (DNG/RRC) 6.0.2, 6.0.6, 6.0.6.1, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed ar… Doors Next Mitigation only Fix from $1,6002020-06-19 MEDIUM 5.4 CVE-2020-4380 IBM Workload Scheduler 9.3.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… Workload Scheduler Mitigation only Fix from $1,6002020-06-11 CRITICAL 9.8 CVE-2020-4193 IBM Security Guardium 11.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Fo… Security Guardium Mitigation only Fix from $2,3002020-06-04 HIGH 7.6 CVE-2020-4509 IBM QRadar SIEM 7.3 and 7.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit … Qradar Security Information And Event Manager Mitigation only Fix from $1,9502020-06-04 MEDIUM 6.1 CVE-2020-4183 IBM Security Guardium 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… Security Guardium Mitigation only Fix from $1,6002020-06-04 HIGH 7.0 CVE-2020-4352 IBM MQ on HPE NonStop 8.0.4 and 8.1.0 is vulnerable to a privilege escalation attack when running in restricted mode. IBM X-Force ID: 178427. Mq For Hpe Nonstop Mitigation only Fix from $1,9502020-05-29 MEDIUM 6.1 CVE-2020-4490 IBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass security restr… Business Automation Workflow Mitigation only Fix from $1,6002020-05-29 HIGH 7.8 CVE-2020-4266 IBM i2 Intelligent Analyis Platform 9.2.1 could allow a local attacker to execute arbitrary code on the system, caused by a memory corruption. By per… I2 Analysts Notebook Mitigation only Fix from $1,9502020-05-14 HIGH 7.8 CVE-2020-4285 IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error.… I2 Analysts Notebook Mitigation only Fix from $1,9502020-05-14 HIGH 7.8 CVE-2020-4287 IBM i2 Intelligent Analyis Platform 9.2.1 could allow a remote attacker to execute arbitrary code on the system, caused by a memory corruption error.… I2 Analysts Notebook Mitigation only Fix from $1,9502020-05-14