Browse CVEs

MEDIUM 6.5 CVE-2016-8913 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a speciall… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 6.1 CVE-2016-6113 IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the i… Domino Mitigation only Fix from $1,6002017-02-01 MEDIUM 6.1 CVE-2016-8922 Exphox WebRadar is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering… Web Content Manager Production Analytics Mitigation only Fix from $1,6002017-02-01 MEDIUM 6.1 CVE-2016-8936 IBM Social Rendering Templates for Digital Data Connector is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… Social Rendering Templates For Digital Data Connector Patch available Fix from $1,6002017-02-01 MEDIUM 5.9 CVE-2016-8918 IBM Integration Bus, under non default configurations, could allow a remote user to authenticate without providing valid credentials. Integration Bus Patch available Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6047 IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Jazz Reporting Service Patch available Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6054 IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte… Jazz Reporting Service Patch available Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6061 IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alte… Rational Collaborative Lifecycle Management Patch available Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6072 IBM Maximo Asset Management is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI t… Maximo Asset Management Patch available Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6123 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-6125 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-8911 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to v… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-8920 IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript c… Kenexa Lms On Cloud Mitigation only Fix from $1,6002017-02-01 MEDIUM 5.4 CVE-2016-8934 IBM WebSphere Application Server is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… Websphere Application Server Patch available Fix from $1,6002017-02-01 MEDIUM 5.3 CVE-2016-6080 The WebAdmin context for WebSphere Message Broker allows directory listings which could disclose sensitive information to the attacker. Websphere Message Broker Patch available Fix from $1,6002017-02-01 CRITICAL 9.8 CVE-2016-5964 IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacke… Security Privileged Identity Manager Patch available Fix from $2,3002017-02-01 HIGH 8.8 CVE-2016-5937 IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized acti… Kenexa Lcms Premier Patch available Fix from $1,9502017-02-01 HIGH 8.8 CVE-2016-5952 IBM Kenexa LCMS Premier on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the… Kenexa Lcms Premier Patch available Fix from $1,9502017-02-01 HIGH 8.8 CVE-2016-6045 IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unaut… Tivoli Storage Manager Patch available Fix from $1,9502017-02-01 HIGH 7.8 CVE-2016-5985 The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local att… Tivoli Storage Manager after 7.1.6.2 Fix from $1,9502017-02-01 HIGH 7.5 CVE-2016-5958 IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag … Security Privileged Identity Manager Patch available Fix from $1,9502017-02-01 HIGH 7.3 CVE-2016-6042 IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memor… Security Appscan Patch available Fix from $1,9502017-02-01 HIGH 7.0 CVE-2016-6043 Tivoli Storage Manager Operations Center could allow a local user to take over a previously logged in user due to session expiration not being enforc… Tivoli Storage Manager Patch available Fix from $1,9502017-02-01 MEDIUM 6.8 CVE-2016-6034 IBM Tivoli Storage Manager for Virtual Environments (VMware) could disclose the Windows domain credentials to a user with a high level of privileges. Tivoli Storage Manager For Virtual Environments Data Protection For Vmware Patch available Fix from $1,6002017-02-01 MEDIUM 6.5 CVE-2016-5950 IBM Kenexa LCMS Premier on Cloud stores user credentials in plain in clear text which can be read by an authenticated user. Kenexa Lcms Premier Patch available Fix from $1,6002017-02-01 MEDIUM 6.5 CVE-2016-5988 IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available t… Security Privileged Identity Manager Patch available Fix from $1,6002017-02-01 MEDIUM 6.5 CVE-2016-5994 IBM InfoSphere Information Server contains a vulnerability that would allow an authenticated user to browse any file on the engine tier, and examine … Infosphere Information Server Patch available Fix from $1,6002017-02-01 MEDIUM 6.3 CVE-2016-5939 IBM Kenexa LMS on Cloud is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker… Kenexa Lms On Cloud Patch available Fix from $1,6002017-02-01 MEDIUM 6.3 CVE-2016-5990 IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically execute… Security Privileged Identity Manager Patch available Fix from $1,6002017-02-01 MEDIUM 6.1 CVE-2016-5984 IBM InfoSphere Information Server is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection. A remote attacker could expl… Infosphere Information Server Patch available Fix from $1,6002017-02-01