Browse CVEs

MEDIUM 6.8 CVE-2016-0230 IBM Power Hardware Management Console (HMC) 7.3 through 7.3.0 SP7, 7.9 through 7.9.0 SP3, 8.1 through 8.1.0 SP3, 8.2 through 8.2.0 SP2, 8.3 through 8… Hardware Management Console Patch available Fix from $1,6002016-07-07 HIGH 8.0 CVE-2016-2863 Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Commerce 7.0 Feature Pack 8, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.2 all… Websphere Commerce Mitigation only Fix from $1,9502016-07-03 MEDIUM 6.1 CVE-2016-2862 Cross-site scripting (XSS) vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11, 7.0 before 7.0.0.9 cumulative iFix 3, and 8.0 before 8.0.0.5… Websphere Commerce Patch available Fix from $1,6002016-07-03 MEDIUM 6.1 CVE-2016-0359 CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 Full before 8.5.5.10, and 8.5 Li… Websphere Application Server Mitigation only Fix from $1,6002016-07-03 MEDIUM 5.4 CVE-2016-0346 Cross-site scripting (XSS) vulnerability in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.1 before IF16, 10.2.2 befor… Cognos Business Intelligence Mitigation only Fix from $1,6002016-07-03 MEDIUM 5.4 CVE-2016-0221 Cross-site scripting (XSS) vulnerability in IBM Cognos TM1, as used in IBM Cognos Business Intelligence 10.2 before IF20, 10.2.1 before IF17, 10.2.1.… Cognos Business Intelligence Mitigation only Fix from $1,6002016-07-03 MEDIUM 6.5 CVE-2016-2968 IBM Security QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attackers to bypass authentication, and obtain sensitive information or modif… Security Qradar Incident Forensics Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.3 CVE-2016-2961 The integration server in IBM Integration Bus 9 before 9.0.0.6 and 10 before 10.0.0.5 and WebSphere Message Broker 8 before 8.0.0.8 allows remote att… Integration Bus Mitigation only Fix from $1,6002016-07-02 MEDIUM 5.4 CVE-2016-2883 Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows re… Tririga Application Platform Patch available Fix from $1,6002016-07-02 MEDIUM 5.3 CVE-2016-2872 Directory traversal vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7 allows remote attac… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002016-07-02 HIGH 7.0 CVE-2016-2867 IBM InfoSphere Streams before 4.0.1.2 and IBM Streams before 4.1.1.1 do not properly implement the runAsUser feature, which allows local users to obt… Infosphere Streams after 4.1.1.0 Fix from $1,9502016-07-02 MEDIUM 6.1 CVE-2016-0400 CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 al… Websphere Extreme Scale Patch available Fix from $1,6002016-07-02 MEDIUM 5.4 CVE-2016-0399 Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP00… Maximo Asset Management Mitigation only Fix from $1,6002016-07-02 CRITICAL 9.8 CVE-2016-0391 The IBM Watson Developer Cloud services on Bluemix platforms do not properly generate random numbers for service-instance credentials, which makes it… Watson Developer Cloud Mitigation only Fix from $2,3002016-07-02 MEDIUM 5.4 CVE-2016-0387 Cross-site scripting (XSS) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows re… Tririga Application Platform Patch available Fix from $1,6002016-07-02 HIGH 8.0 CVE-2016-0386 Cross-site request forgery (CSRF) vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 al… Tririga Application Platform Mitigation only Fix from $1,9502016-07-02 HIGH 8.8 CVE-2016-0375 JMS Client in IBM MessageSight 1.1.x through 1.1.0.1, 1.2.x through 1.2.0.3, and 2.0.x through 2.0.0.0 allows remote authenticated users to obtain ad… Messagesight Mitigation only Fix from $1,9502016-07-01 HIGH 8.8 CVE-2016-0374 The builder tools in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allow remote authenticated users… Tririga Application Platform Mitigation only Fix from $1,9502016-07-01 MEDIUM 5.9 CVE-2016-0365 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1, when agent-relay Codestation artifact caching is enabled,… Urbancode Deploy Mitigation only Fix from $1,6002016-07-01 HIGH 7.7 CVE-2016-0362 IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to conduct server-s… Tririga Application Platform Mitigation only Fix from $1,9502016-07-01 MEDIUM 6.5 CVE-2016-0349 IBM Business Process Manager 8.5.6 through 8.5.6.2 and 8.5.7 before 8.5.7.CF201606 allows remote authenticated users to bypass intended access restri… Business Process Manager Mitigation only Fix from $1,6002016-06-30 MEDIUM 5.4 CVE-2016-0322 Cross-site scripting (XSS) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, 5.0 through CR4, and 5.5 before CR1 allows remote authe… Connections Mitigation only Fix from $1,6002016-06-30 HIGH 8.1 CVE-2016-0304 The Java Console in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6, when a certain unsupported configuration involving UNC share pat… Domino Mitigation only Fix from $1,9502016-06-29 MEDIUM 6.5 CVE-2016-0298 Directory traversal vulnerability in IBM Security Guardium Database Activity Monitor 10 before 10.0p100 allows remote authenticated users to read arb… Security Guardium after 10.0 Fix from $1,6002016-06-29 HIGH 7.7 CVE-2016-0267 IBM UrbanCode Deploy 6.0.x before 6.0.1.13, 6.1.x before 6.1.3.3, and 6.2.x before 6.2.1.1 allows remote authenticated users to obtain sensitive clea… Urbancode Deploy Mitigation only Fix from $1,9502016-06-29 HIGH 7.0 CVE-2016-0263 IBM Spectrum Scale 4.1 before 4.1.1.5 and 4.2 before 4.2.0.2 and General Parallel File System 3.5 before 3.5.0.30 allow local users to gain privilege… General Parallel File System Storage Server Mitigation only Fix from $1,9502016-06-29 HIGH 7.5 CVE-2016-0260 Memory leak in queue-manager agents in IBM WebSphere MQ 8.x before 8.0.0.5 allows remote attackers to cause a denial of service (heap memory consumpt… Websphere Mq Mitigation only Fix from $1,9502016-06-29 HIGH 8.8 CVE-2016-0233 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote authenticated users to execute arbitrary SQL… Marketing Platform Mitigation only Fix from $1,9502016-06-28 MEDIUM 6.1 CVE-2016-0229 Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web scrip… Marketing Platform Mitigation only Fix from $1,6002016-06-28 CRITICAL 9.8 CVE-2016-0224 SQL injection vulnerability in IBM Marketing Platform 8.5.x, 8.6.x, and 9.x before 9.1.2.2 allows remote attackers to execute arbitrary SQL commands … Marketing Platform Mitigation only Fix from $2,3002016-06-28