Browse CVEs

MEDIUM 5.4 CVE-2017-1160 IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users … Financial Transaction Manager Patch available Fix from $1,6002017-04-17 HIGH 8.8 CVE-2017-1205 IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access. IBM X-… Spectrum Lsf Patch available Fix from $1,9502017-04-14 MEDIUM 6.5 CVE-2016-8925 IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the atta… Tivoli Application Dependency Discovery Manager Patch available Fix from $1,6002017-04-14 MEDIUM 5.4 CVE-2016-8927 IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arb… Tivoli Application Dependency Discovery Manager Patch available Fix from $1,6002017-04-14 HIGH 8.8 CVE-2016-6100 IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is … Disposal And Governance Management For It Mitigation only Fix from $1,9502017-04-05 MEDIUM 5.4 CVE-2016-3015 IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu… Cognos Analytics Patch available Fix from $1,6002017-04-05 MEDIUM 5.4 CVE-2016-3031 IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thu… Cognos Analytics Patch available Fix from $1,6002017-04-05 MEDIUM 5.3 CVE-2017-1180 The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM … Tririga Application Platform Mitigation only Fix from $1,6002017-04-05 CRITICAL 9.1 CVE-2016-6111 IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when pr… Curam Social Program Management Patch available Fix from $2,3002017-03-31 HIGH 8.8 CVE-2016-8917 IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthoriz… Sterling Selling And Fulfillment Foundation Patch available Fix from $1,9502017-03-31 HIGH 8.1 CVE-2016-9707 IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote a… Rational Rhapsody Design Manager Patch available Fix from $1,9502017-03-31 MEDIUM 6.5 CVE-2017-1154 IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not… Algo One Patch available Fix from $1,6002017-03-31 MEDIUM 6.1 CVE-2016-9990 IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… Inotes Patch available Fix from $1,6002017-03-31 MEDIUM 5.4 CVE-2016-6022 IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cod… Rational Quality Manager Patch available Fix from $1,6002017-03-31 MEDIUM 5.4 CVE-2016-6031 IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript … Rational Quality Manager Patch available Fix from $1,6002017-03-31 MEDIUM 5.4 CVE-2016-6036 IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaS… Rational Quality Manager Patch available Fix from $1,6002017-03-31 MEDIUM 5.4 CVE-2016-8935 IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embe… Kenexa Lms Patch available Fix from $1,6002017-03-31 HIGH 8.8 CVE-2016-8960 IBM Cognos Business Intelligence 10.2 could allow a user with lower privilege Capabilities to adopt the Capabilities of a higher-privilege user by in… Cognos Business Intelligence Patch available Fix from $1,9502017-03-27 HIGH 8.8 CVE-2017-1153 IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have a… Tririga Application Platform Patch available Fix from $1,9502017-03-27 MEDIUM 6.5 CVE-2017-1142 IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure … Kenexa Lcms Premier Mitigation only Fix from $1,6002017-03-27 MEDIUM 6.1 CVE-2017-1120 IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Websphere Portal Patch available Fix from $1,6002017-03-27 MEDIUM 5.4 CVE-2016-6056 IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… Call Center For Commerce Patch available Fix from $1,6002017-03-27 MEDIUM 5.4 CVE-2016-9737 IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Tririga Application Platform Patch available Fix from $1,6002017-03-27 MEDIUM 5.3 CVE-2017-1143 IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable… Kenexa Lcms Premier Mitigation only Fix from $1,6002017-03-27 HIGH 8.1 CVE-2017-1151 IBM WebSphere Application Server 8.0, 8.5, 8.5.5, and 9.0 using OpenID Connect (OIDC) configured with a Trust Association Interceptor (TAI) could all… Websphere Application Server Patch available Fix from $1,9502017-03-20 HIGH 8.6 CVE-2017-1145 IBM WebSphere MQ 8.0.0.6 does not properly terminate channel agents when they are no longer needed, which could allow a user to cause a denial of ser… Websphere Mq Patch available Fix from $1,9502017-03-20 HIGH 7.8 CVE-2017-1134 IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459. Power Hardware Management Console Patch available Fix from $1,9502017-03-20 MEDIUM 6.8 CVE-2016-2981 An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM Reference #: 1999… Rational Collaborative Lifecycle Management Patch available Fix from $1,6002017-03-20 MEDIUM 5.4 CVE-2016-9694 IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the We… Rational Rhapsody Design Manager Patch available Fix from $1,6002017-03-20 MEDIUM 5.4 CVE-2016-9696 IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be ex… Rational Rhapsody Design Manager Patch available Fix from $1,6002017-03-20