Browse CVEs

MEDIUM 5.4 CVE-2017-1146 IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Content Navigator Mitigation only Fix from $1,6002017-03-20 MEDIUM 5.5 CVE-2016-9985 IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671. Cognos Business Intelligence Patch available Fix from $1,6002017-03-08 MEDIUM 5.4 CVE-2016-9006 IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Urbancode Deploy Mitigation only Fix from $1,6002017-03-08 MEDIUM 5.1 CVE-2016-5894 IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local us… Websphere Commerce Patch available Fix from $1,6002017-03-08 HIGH 8.8 CVE-2016-8940 IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, … Tivoli Storage Manager Patch available Fix from $1,9502017-03-07 HIGH 8.8 CVE-2016-9726 IBM QRadar Incident Forensics 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-cra… Qradar Incident Forensics Patch available Fix from $1,9502017-03-07 HIGH 8.5 CVE-2016-9727 IBM QRadar 7.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an at… Qradar Incident Forensics Patch available Fix from $1,9502017-03-07 HIGH 8.1 CVE-2016-9724 IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attack… Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-07 HIGH 7.5 CVE-2016-9728 IBM Qradar 7.2 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view,… Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-07 HIGH 7.5 CVE-2016-9740 IBM QRadar 7.2 could allow a remote attacker to consume all resources on the server due to not properly restricting the size or amount of resources r… Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-07 MEDIUM 6.5 CVE-2016-8971 IBM WebSphere MQ 8.0 could allow an authenticated user with queue manager permissions to cause a segmentation fault which would result in the box hav… Websphere Mq Patch available Fix from $1,6002017-03-07 MEDIUM 6.5 CVE-2016-9729 IBM QRadar 7.2 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. … Qradar Security Information And Event Manager Patch available Fix from $1,6002017-03-07 MEDIUM 6.1 CVE-2016-9693 IBM Business Process Manager 7.5, 8.0, and 8.5 has a file download capability that is vulnerable to a set of attacks. Ultimately, an attacker can cau… Business Process Manager Patch available Fix from $1,6002017-03-07 MEDIUM 6.1 CVE-2016-9723 IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering … Qradar Incident Forensics Patch available Fix from $1,6002017-03-07 MEDIUM 5.4 CVE-2017-1133 IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering … Qradar Incident Forensics Patch available Fix from $1,6002017-03-07 MEDIUM 5.3 CVE-2016-9720 IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM Referen… Qradar Incident Forensics Patch available Fix from $1,6002017-03-07 MEDIUM 5.3 CVE-2016-9725 IBM QRadar Incident Forensics 7.2 allows for Cross-Origin Resource Sharing (CORS), which is a mechanism that allows web sites to request resources fr… Qradar Security Information And Event Manager Patch available Fix from $1,6002017-03-07 HIGH 7.8 CVE-2016-2879 IBM QRadar 7.2 uses outdated hashing algorithms to hash certain passwords, which could allow a local user to obtain and decrypt user credentials. IBM… Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-01 HIGH 7.8 CVE-2016-2880 IBM QRadar 7.2 stores the encryption key used to encrypt the service account password which can be obtained by a local user. IBM Reference #: 1997340. Qradar Security Information And Event Manager Patch available Fix from $1,9502017-03-01 HIGH 7.1 CVE-2016-9992 IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which… Kenexa Lcms Premier Patch available Fix from $1,9502017-03-01 HIGH 7.1 CVE-2016-9993 IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which… Kenexa Lcms Premier Patch available Fix from $1,9502017-03-01 HIGH 7.1 CVE-2016-9994 IBM Kenexa LCMS Premier on Cloud 9.0, and 10.0.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which… Kenexa Lcms Premier Patch available Fix from $1,9502017-03-01 MEDIUM 6.1 CVE-2016-8232 Document Object Model-(DOM) based cross-site scripting vulnerability in the Advanced Management Module (AMM) versions earlier than 66Z of Lenovo IBM … Advanced Management Module Firmware Mitigation only Fix from $1,6002017-03-01 MEDIUM 5.4 CVE-2016-5932 IBM Connections 4.0, 4.5, 5.0, and 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Connections Mitigation only Fix from $1,6002017-03-01 HIGH 8.8 CVE-2016-9975 IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and … Dashboard Application Services Hub Patch available Fix from $1,9502017-02-24 HIGH 7.2 CVE-2016-8998 IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a speciall… Tivoli Storage Manager Patch available Fix from $1,9502017-02-24 HIGH 8.1 CVE-2016-8974 IBM Rhapsody DM 4.0, 5.0 and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML dat… Rational Rhapsody Design Manager Patch available Fix from $1,9502017-02-23 MEDIUM 6.1 CVE-2016-5883 IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… Inotes Patch available Fix from $1,6002017-02-23 MEDIUM 5.4 CVE-2016-6055 IBM Rational DOORS Next Generation 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaSc… Rational Doors Next Generation Patch available Fix from $1,6002017-02-23 MEDIUM 6.5 CVE-2016-3013 IBM WebSphere MQ 8.0 could allow an authenticated user to crash the MQ channel due to improper data conversion handling. IBM Reference #: 1998661. Websphere Mq after 8.0.0.5 Fix from $1,6002017-02-22