Browse CVEs

HIGH 7.5 CVE-2013-6749 Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitr… Lotus Quickr For Domino Mitigation only Fix from $1,9502014-01-29 HIGH 7.1 CVE-2013-6747 IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows rem… Global Security Kit Mitigation only Fix from $1,9502014-01-27 HIGH 10.0 CVE-2013-0485 Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and… Java Mitigation only Fix from $1,9502014-01-21 HIGH 8.5 CVE-2013-5385 The OSPF implementation in IBM i 6.1 and 7.1, in z/OS on zSeries servers, and in Networking Operating System (aka NOS, formerly BLADE Operating Syste… I Mitigation only Fix from $1,9502014-01-02 MEDIUM 6.5 CVE-2013-5409 Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute a… Sterling B2b Integrator Mitigation only Fix from $1,6002013-12-21 MEDIUM 5.8 CVE-2013-4046 Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to … Spss Collaboration And Deployment Services Mitigation only Fix from $1,6002013-12-21 MEDIUM 5.0 CVE-2013-4069 The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read … Spss Collaboration And Deployment Services Mitigation only Fix from $1,6002013-12-21 MEDIUM 5.0 CVE-2013-4070 The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to disco… Spss Collaboration And Deployment Services Mitigation only Fix from $1,6002013-12-21 HIGH 7.2 CVE-2013-5415 Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges … Rational Clearcase Mitigation only Fix from $1,9502013-12-18 HIGH 7.2 CVE-2013-5416 Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain p… Rational Clearcase Mitigation only Fix from $1,9502013-12-18 MEDIUM 6.8 CVE-2013-5447EPSS 34% Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XF… Forms Viewer No fix yet Fix from $1,6002013-12-10 MEDIUM 6.4 CVE-2013-6718 The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account na… Advanced Management Module Firmware Mitigation only Fix from $1,6002013-12-01 HIGH 9.3 CVE-2013-5456EPSS 6% The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and… Java Mitigation only Fix from $1,9502013-11-24 HIGH 9.3 CVE-2013-5457EPSS 6% Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code… Java Mitigation only Fix from $1,9502013-11-24 HIGH 9.3 CVE-2013-5458EPSS 5% Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors. Java Mitigation only Fix from $1,9502013-11-24 MEDIUM 6.8 CVE-2013-4041 Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to… Java No fix yet Fix from $1,6002013-11-24 MEDIUM 6.8 CVE-2013-5375 Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to… Java Mitigation only Fix from $1,6002013-11-24 MEDIUM 5.0 CVE-2013-6312 Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 al… Rational Performance Tester Mitigation only Fix from $1,6002013-11-22 MEDIUM 5.0 CVE-2013-3030 The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2,… Cognos Business Intelligence Mitigation only Fix from $1,6002013-11-18 MEDIUM 6.0 CVE-2013-4050 Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated use… Lotus Domino Mitigation only Fix from $1,6002013-11-08 MEDIUM 5.8 CVE-2013-5431 Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and … Tivoli Federated Identity Manager Mitigation only Fix from $1,6002013-11-01 MEDIUM 5.5 CVE-2013-5430 The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remot… Security Appscan Mitigation only Fix from $1,6002013-10-28 MEDIUM 6.8 CVE-2013-5424 IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by… Flex System Manager Mitigation only Fix from $1,6002013-10-25 HIGH 10.0 CVE-2013-5446 The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and rem… Websphere Datapower Xc10 Appliance Mitigation only Fix from $1,9502013-10-22 HIGH 7.1 CVE-2013-5428 IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a … Websphere Datapower Xc10 Appliance Mitigation only Fix from $1,9502013-10-22 MEDIUM 5.4 CVE-2013-0500 IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed w… Storwize V7000 Unified Software Mitigation only Fix from $1,6002013-10-17 HIGH 7.5 CVE-2013-5393 The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified … Websphere Extreme Scale No fix yet Fix from $1,9502013-10-16 HIGH 10.0 CVE-2013-4804 Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain… Business Process Monitor Mitigation only Fix from $1,9502013-10-13 HIGH 10.0 CVE-2013-2366 Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain… Business Process Monitor Mitigation only Fix from $1,9502013-10-13 MEDIUM 6.8 CVE-2013-4056 Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server … Infosphere Information Server Mitigation only Fix from $1,6002013-10-13