Vulnerability index

Browse CVEs

6,336 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Hardware Management Console MEDIUM 6.8
CVE-2016-0230

IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8…

Patch available
Fix from $1,600 2016-07-07
Websphere Commerce HIGH 8.0
CVE-2016-2863

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 all…

Mitigation only
Fix from $1,950 2016-07-03
Websphere Commerce MEDIUM 6.1
CVE-2016-2862

Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5…

Patch available
Fix from $1,600 2016-07-03
Websphere Application Server MEDIUM 6.1
CVE-2016-0359

CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Li…

Mitigation only
Fix from $1,600 2016-07-03
Cognos Business Intelligence MEDIUM 5.4
CVE-2016-0346

Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 befor…

Mitigation only
Fix from $1,600 2016-07-03
Cognos Business Intelligence MEDIUM 5.4
CVE-2016-0221

Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.…

Mitigation only
Fix from $1,600 2016-07-03
Security Qradar Incident Forensics MEDIUM 6.5
CVE-2016-2968

IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modif…

Mitigation only
Fix from $1,600 2016-07-02
Integration Bus MEDIUM 5.3
CVE-2016-2961

The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote att…

Mitigation only
Fix from $1,600 2016-07-02
Tririga Application Platform MEDIUM 5.4
CVE-2016-2883

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows re…

Patch available
Fix from $1,600 2016-07-02
Qradar Security Information And Event Manager MEDIUM 5.3
CVE-2016-2872

Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attac…

Mitigation only
Fix from $1,600 2016-07-02
Infosphere Streams HIGH 7.0
CVE-2016-2867

IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obt…

Fix: after 4.1.1.0
Fix from $1,950 2016-07-02
Websphere Extreme Scale MEDIUM 6.1
CVE-2016-0400

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 al…

Patch available
Fix from $1,600 2016-07-02
Maximo Asset Management MEDIUM 5.4
CVE-2016-0399

Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP00…

Mitigation only
Fix from $1,600 2016-07-02
Watson Developer Cloud CRITICAL 9.8
CVE-2016-0391

The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it…

Mitigation only
Fix from $2,300 2016-07-02
Tririga Application Platform MEDIUM 5.4
CVE-2016-0387

Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows re…

Patch available
Fix from $1,600 2016-07-02
Tririga Application Platform HIGH 8.0
CVE-2016-0386

Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 al…

Mitigation only
Fix from $1,950 2016-07-02
Messagesight HIGH 8.8
CVE-2016-0375

JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain ad…

Mitigation only
Fix from $1,950 2016-07-01
Tririga Application Platform HIGH 8.8
CVE-2016-0374

The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users…

Mitigation only
Fix from $1,950 2016-07-01
Urbancode Deploy MEDIUM 5.9
CVE-2016-0365

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled,…

Mitigation only
Fix from $1,600 2016-07-01
Tririga Application Platform HIGH 7.7
CVE-2016-0362

IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-s…

Mitigation only
Fix from $1,950 2016-07-01
Business Process Manager MEDIUM 6.5
CVE-2016-0349

IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restri…

Mitigation only
Fix from $1,600 2016-06-30
Connections MEDIUM 5.4
CVE-2016-0322

Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authe…

Mitigation only
Fix from $1,600 2016-06-30
Domino HIGH 8.1
CVE-2016-0304

The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pat…

Mitigation only
Fix from $1,950 2016-06-29
Security Guardium MEDIUM 6.5
CVE-2016-0298

Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arb…

Fix: after 10.0
Fix from $1,600 2016-06-29
Urbancode Deploy HIGH 7.7
CVE-2016-0267

IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive clea…

Mitigation only
Fix from $1,950 2016-06-29
General Parallel File System Storage Server HIGH 7.0
CVE-2016-0263

IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privilege…

Mitigation only
Fix from $1,950 2016-06-29
Websphere Mq HIGH 7.5
CVE-2016-0260

Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumpt…

Mitigation only
Fix from $1,950 2016-06-29
Marketing Platform HIGH 8.8
CVE-2016-0233

SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL…

Mitigation only
Fix from $1,950 2016-06-28
Marketing Platform MEDIUM 6.1
CVE-2016-0229

Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web scrip…

Mitigation only
Fix from $1,600 2016-06-28
Marketing Platform CRITICAL 9.8
CVE-2016-0224

SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to execute arbitrary SQL commands …

Mitigation only
Fix from $2,300 2016-06-28