Browse CVEs

MEDIUM 5.4 CVE-2016-0350 Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0… Jazz Reporting Service Mitigation only Fix from $1,6002016-07-08 HIGH 8.8 CVE-2016-0315 The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 main… Jazz Reporting Service Mitigation only Fix from $1,9502016-07-08 MEDIUM 6.5 CVE-2016-0314 The Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0.2 ifix016 and 6.x before 6.0.1 ifix005 allo… Jazz Reporting Service Mitigation only Fix from $1,6002016-07-08 MEDIUM 5.4 CVE-2016-0313 Cross-site scripting (XSS) vulnerability in the Report Builder and Data Collection Component (DCC) in IBM Jazz Reporting Service (JRS) 5.x before 5.0… Jazz Reporting Service Mitigation only Fix from $1,6002016-07-08 HIGH 7.8 CVE-2016-0287 IBM i Access 7.1 on Windows allows local users to discover registry passwords via unspecified vectors. I Access Mitigation only Fix from $1,9502016-07-08 HIGH 8.2 CVE-2016-0271 The agents in IBM UrbanCode Deploy 6.x before 6.0.1.14, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 do not verify a server's identity in a JMS ses… Urbancode Deploy Mitigation only Fix from $1,9502016-07-08 MEDIUM 5.1 CVE-2016-0252 IBM Control Center 6.x before 6.0.0.1 iFix06 and Sterling Control Center 5.4.x before 5.4.2.1 iFix09 allow local users to decrypt the master key via … Control Center Mitigation only Fix from $1,6002016-07-08 HIGH 7.5 CVE-2016-2923 IBM WebSphere Application Server (WAS) 8.5 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 does not include the HTTPOnly flag in a Set-Cooki… Websphere Application Server Mitigation only Fix from $1,9502016-07-07 MEDIUM 5.3 CVE-2016-0389 Admin Center in IBM WebSphere Application Server (WAS) 8.5.5.2 through 8.5.5.9 Liberty before Liberty Fix Pack 16.0.0.2 allows remote attackers to ob… Websphere Application Server Mitigation only Fix from $1,6002016-07-07 HIGH 8.0 CVE-2016-2863 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 all… Websphere Commerce Mitigation only Fix from $1,9502016-07-03 MEDIUM 6.1 CVE-2016-0359 CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Li… Websphere Application Server Mitigation only Fix from $1,6002016-07-03 MEDIUM 5.4 CVE-2016-0346 Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 befor… Cognos Business Intelligence Mitigation only Fix from $1,6002016-07-03 MEDIUM 5.4 CVE-2016-0221 Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.… Cognos Business Intelligence Mitigation only Fix from $1,6002016-07-03 MEDIUM 6.5 CVE-2016-2968 IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modif… Security Qradar Incident Forensics Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.3 CVE-2016-2961 The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote att… Integration Bus Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.3 CVE-2016-2872 Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attac… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.4 CVE-2016-0399 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP00… Maximo Asset Management Mitigation only Fix from $1,6002016-07-02 CRITICAL 9.8 CVE-2016-0391 The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it… Watson Developer Cloud Mitigation only Fix from $2,3002016-07-02 HIGH 8.0 CVE-2016-0386 Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 al… Tririga Application Platform Mitigation only Fix from $1,9502016-07-02 HIGH 8.8 CVE-2016-0375 JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain ad… Messagesight Mitigation only Fix from $1,9502016-07-01 HIGH 8.8 CVE-2016-0374 The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users… Tririga Application Platform Mitigation only Fix from $1,9502016-07-01 MEDIUM 5.9 CVE-2016-0365 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled,… Urbancode Deploy Mitigation only Fix from $1,6002016-07-01 HIGH 7.7 CVE-2016-0362 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-s… Tririga Application Platform Mitigation only Fix from $1,9502016-07-01 MEDIUM 6.5 CVE-2016-0349 IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restri… Business Process Manager Mitigation only Fix from $1,6002016-06-30 MEDIUM 5.4 CVE-2016-0322 Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authe… Connections Mitigation only Fix from $1,6002016-06-30 HIGH 8.1 CVE-2016-0304 The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pat… Domino Mitigation only Fix from $1,9502016-06-29 HIGH 7.7 CVE-2016-0267 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive clea… Urbancode Deploy Mitigation only Fix from $1,9502016-06-29 HIGH 7.0 CVE-2016-0263 IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privilege… General Parallel File System Storage Server Mitigation only Fix from $1,9502016-06-29 HIGH 7.5 CVE-2016-0260 Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumpt… Websphere Mq Mitigation only Fix from $1,9502016-06-29 HIGH 8.8 CVE-2016-0233 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL… Marketing Platform Mitigation only Fix from $1,9502016-06-28