Browse CVEs

MEDIUM 5.4 CVE-2015-7402 Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authenticated users to inject arbitr… Curam Social Program Management Mitigation only Fix from $1,6002016-01-02 HIGH 8.0 CVE-2015-5018 IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote a… Security Access Manager 9.0 Firmware Mitigation only Fix from $1,9502016-01-02 MEDIUM 5.1 CVE-2015-4996 IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof database servers and discover crede… Rational Clearquest Mitigation only Fix from $1,6002016-01-02 MEDIUM 6.5 CVE-2015-7456 IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin passwords via unspecified ve… Spectrum Scale Mitigation only Fix from $1,6002016-01-01 MEDIUM 5.4 CVE-2015-7409 Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated users to inject arbitrary web scr… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002016-01-01 MEDIUM 5.4 CVE-2015-7415 Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and 6.2 before 6.2.0.2 allow rem… Urbancode Deploy Mitigation only Fix from $1,6002016-01-01 HIGH 7.4 CVE-2015-7410 The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS sessions, which allows man-in-the-mi… Sterling B2b Integrator Mitigation only Fix from $1,9502016-01-01 MEDIUM 5.4 CVE-2015-5049 SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 allows remote authenticated us… Openpages Grc Platform Mitigation only Fix from $1,6002016-01-01 MEDIUM 5.3 CVE-2015-4943 IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a series of connect and disconn… Websphere Mq Light Mitigation only Fix from $1,6002016-01-01 MEDIUM 5.3 CVE-2015-4941 IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a denial of service (MQXR servi… Websphere Mq Light Mitigation only Fix from $1,6002016-01-01 HIGH 7.8 CVE-2015-7489 IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scripts, which allows local users… Spss Statistics Mitigation only Fix from $1,9502016-01-01 MEDIUM 6.8 CVE-2015-7441 Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 … Business Process Manager Mitigation only Fix from $1,6002016-01-01 HIGH 7.4 CVE-2015-1947 Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is used, allows local users to … Infosphere Biginsights Mitigation only Fix from $1,9502015-12-31 MEDIUM 5.3 CVE-2015-7447 IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before … Websphere Portal Mitigation only Fix from $1,6002015-12-31 MEDIUM 6.1 CVE-2015-4998 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, … Websphere Portal Mitigation only Fix from $1,6002015-12-21 MEDIUM 6.1 CVE-2015-4993 Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, … Websphere Portal Mitigation only Fix from $1,6002015-12-21 MEDIUM 5.0 CVE-2015-7427 IBM DataPower Gateway appliances with firmware 6.x before 6.0.0.17, 6.0.1.x before 6.0.1.17, 7.x before 7.0.0.10, 7.1.0.x before 7.1.0.7, and 7.2.x b… Datapower Gateway after 6.0.0.16 Fix from $1,6002015-11-14 HIGH 7.8 CVE-2015-7419 IBM WebSphere Portal 8.0.0.1 before CF19 and 8.5.0 before CF09 allows remote attackers to cause a denial of service (memory consumption) via crafted … Websphere Portal Mitigation only Fix from $1,9502015-11-14 HIGH 7.2 CVE-2015-7818 The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows loca… System Networking Switch Center after 8.1.1.0 Fix from $1,9502015-11-12 HIGH 7.1 CVE-2015-7817 Race condition in the administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8… System Networking Switch Center after 8.1.1.0 Fix from $1,9502015-11-12 HIGH 7.2 CVE-2015-5043 diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to obtain root access via unspec… Security Guardium Mitigation only Fix from $1,9502015-11-08 MEDIUM 5.5 CVE-2015-5019 IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated users to read or upload file… Sterling B2b Integrator Mitigation only Fix from $1,6002015-11-08 MEDIUM 5.0 CVE-2015-5015 IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive information via a crafted REST UR… Websphere Commerce Enterprise after 7.0.0.9 Fix from $1,6002015-11-08 HIGH 8.5 CVE-2015-5005 CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by leveraging presence on the c… Powerha System Mirror Mitigation only Fix from $1,9502015-11-08 MEDIUM 6.5 CVE-2015-4966 IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo Asset Management 7.5.0 before … Change And Configuration Management Database Mitigation only Fix from $1,6002015-11-08 HIGH 7.5 CVE-2015-4963 IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote at… Security Access Manager For Web Mitigation only Fix from $1,9502015-11-08 MEDIUM 5.0 CVE-2015-1999 IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote attackers to obtain sensitive… Security Qradar Incident Forensics Mitigation only Fix from $1,6002015-11-08 MEDIUM 6.8 CVE-2015-1997 Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 allows remote attackers to hi… Security Qradar Incident Forensics Mitigation only Fix from $1,6002015-11-08 MEDIUM 5.0 CVE-2015-1994 IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, w… Security Qradar Incident Forensics Mitigation only Fix from $1,6002015-11-08 MEDIUM 5.0 CVE-2015-1993 IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies in an https session, which mak… Security Qradar Incident Forensics Mitigation only Fix from $1,6002015-11-08