Browse CVEs

HIGH 7.5 CVE-2012-0711 Integer signedness error in the db2dasrrm process in the DB2 Administration Server (DAS) in IBM DB2 9.1 through FP11, 9.5 before FP9, and 9.7 through… Db2 Mitigation only Fix from $1,9502012-03-20 HIGH 7.2 CVE-2012-1796 Unspecified vulnerability in IBM Tivoli Monitoring Agent (ITMA), as used in IBM DB2 9.5 before FP9 on UNIX, allows local users to gain privileges via… Db2 Mitigation only Fix from $1,9502012-03-20 MEDIUM 5.0 CVE-2012-0710 IBM DB2 9.1 before FP11, 9.5 before FP9, 9.7 before FP5, and 9.8 before FP4 allows remote attackers to cause a denial of service (daemon crash) via a… Db2 Mitigation only Fix from $1,6002012-03-20 MEDIUM 6.5 CVE-2011-4816 SQL injection vulnerability in the KPI component in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset M… Maximo Asset Management Mitigation only Fix from $1,6002012-03-13 MEDIUM 6.8 CVE-2011-1397 Cross-site request forgery (CSRF) vulnerability in the Labor Reporting page in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, … Maximo Asset Management Mitigation only Fix from $1,6002012-03-13 MEDIUM 5.0 CVE-2011-1394 IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5; IBM Tivoli Asset Management for IT 6.2, 7.1, and 7.2; IBM Tivoli Servi… Maximo Asset Management Mitigation only Fix from $1,6002012-03-13 HIGH 9.3 CVE-2012-0198EPSS 37% Stack-based buffer overflow in the RunAndUploadFile method in the Isig.isigCtl.1 ActiveX control in IBM Tivoli Provisioning Manager Express for Softw… Tivoli Provisioning Manager Express For Software Distribution Mitigation only Fix from $1,9502012-03-06 HIGH 7.5 CVE-2012-0199 Multiple SQL injection vulnerabilities in IBM Tivoli Provisioning Manager Express for Software Distribution 4.1.1 allow remote attackers to execute a… Tivoli Provisioning Manager Express For Software Distribution Mitigation only Fix from $1,9502012-03-06 HIGH 9.3 CVE-2012-0201EPSS 37% Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote a… Personal Communications No fix yet Fix from $1,9502012-03-02 HIGH 9.3 CVE-2012-0189 Multiple unspecified vulnerabilities in the (1) PrintFile and (2) SaveDoc methods in the VsVIEW6 ActiveX control in VsVIEW6.ocx in IBM SPSS SamplePow… Spss Samplepower Mitigation only Fix from $1,9502012-01-18 HIGH 9.3 CVE-2012-0190 Unspecified vulnerability in the Render method in the ExportHTML.ocx ActiveX control in ExportHTML.dll in IBM SPSS Dimensions 5.5 and SPSS Data Colle… Spss Data Collection Mitigation only Fix from $1,9502012-01-18 HIGH 9.3 CVE-2012-0188 Unspecified vulnerability in the SetLicenseInfoEx method in an ActiveX control in mraboutb.dll in IBM SPSS Dimensions 5.5 and SPSS Data Collection 5.… Spss Data Collection Mitigation only Fix from $1,9502012-01-18 HIGH 10.0 CVE-2011-1377 The Web Services Security component in the Web Services Feature Pack before 6.1.0.41 for IBM WebSphere Application Server (WAS) 6.1 does not properly… Websphere Application Server Mitigation only Fix from $1,9502012-01-15 HIGH 7.5 CVE-2011-4668 IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program us… Tivoli Netcool\/reporter Mitigation only Fix from $1,9502011-12-02 MEDIUM 6.8 CVE-2011-1372 The Web User Interface on the IBM TS3100 and TS3200 tape libraries with firmware before A.60 allows remote attackers to bypass authentication and obt… Ts3100 Tape Library Firmware Mitigation only Fix from $1,6002011-11-28 MEDIUM 5.0 CVE-2011-4435 The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not prevent … Db2 Tools For Z\/os Mitigation only Fix from $1,6002011-11-11 HIGH 9.3 CVE-2011-1367 Unspecified vulnerability in the File Load feature in IBM Rational AppScan Standard and Express 7.8.x, 7.9.x, and 8.0.x before 8.0.0.3 allows remote … Rational Appscan Mitigation only Fix from $1,9502011-10-30 HIGH 8.8 CVE-2011-1366 Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0… Rational Appscan Mitigation only Fix from $1,9502011-10-30 MEDIUM 5.0 CVE-2009-2747 The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and… Websphere Application Server Mitigation only Fix from $1,6002011-10-30 MEDIUM 5.0 CVE-2011-1368 The JavaServer Faces (JSF) application functionality in IBM WebSphere Application Server 8.x before 8.0.0.1 does not properly handle requests, which … Websphere Application Server Mitigation only Fix from $1,6002011-10-29 MEDIUM 5.0 CVE-2011-1370 The default configuration of the Sametime configuration servlet (SCS) in the server in IBM Lotus Sametime 7.0 through 8.5.2 does not enable an authen… Lotus Sametime Mitigation only Fix from $1,6002011-10-29 MEDIUM 6.9 CVE-2011-4061 Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring f… Db2 No fix yet Fix from $1,6002011-10-18 HIGH 10.0 CVE-2011-3577 IBM WebSphere Commerce 6.x through 6.0.0.11 and 7.x through 7.0.0.3 does not properly implement Activity Token authentication for Web Services, which… Websphere Commerce Mitigation only Fix from $1,9502011-09-20 HIGH 9.0 CVE-2011-3575EPSS 11% Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execut… Lotus Domino No fix yet Fix from $1,9502011-09-19 MEDIUM 5.0 CVE-2011-1359 Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, a… Websphere Application Server Mitigation only Fix from $1,6002011-09-06 MEDIUM 5.0 CVE-2011-3140 IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle qu… Web Application Firewall No fix yet Fix from $1,6002011-08-15 HIGH 10.0 CVE-2011-3135 Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager B… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 HIGH 10.0 CVE-2011-3136 Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identit… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 HIGH 10.0 CVE-2011-3137 Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identit… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 MEDIUM 5.0 CVE-2011-3138 The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager… Tivoli Federated Identity Manager Mitigation only Fix from $1,6002011-08-12