Browse CVEs

HIGH 9.0 CVE-2011-3575EPSS 11% Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execut… Lotus Domino No fix yet Fix from $1,9502011-09-19 MEDIUM 5.0 CVE-2011-1359 Directory traversal vulnerability in the administration console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41, 7.0 before 7.0.0.19, a… Websphere Application Server Mitigation only Fix from $1,6002011-09-06 MEDIUM 5.0 CVE-2011-3140 IBM Web Application Firewall, as used on the G400 IPS-G400-IB-1 and GX4004 IPS-GX4004-IB-2 appliances with update 31.030, does not properly handle qu… Web Application Firewall No fix yet Fix from $1,6002011-08-15 HIGH 10.0 CVE-2011-3135 Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager B… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 HIGH 10.0 CVE-2011-3136 Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identit… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 HIGH 10.0 CVE-2011-3137 Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identit… Tivoli Federated Identity Manager Mitigation only Fix from $1,9502011-08-12 MEDIUM 5.0 CVE-2011-3138 The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager… Tivoli Federated Identity Manager Mitigation only Fix from $1,6002011-08-12 MEDIUM 6.8 CVE-2009-5083 IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login re… Tivoli Federated Identity Manager No fix yet Fix from $1,6002011-08-12 MEDIUM 5.0 CVE-2008-7299 IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2 uses an incomplete SAML 1.x browser-artifact, which allows remote OpenID providers … Tivoli Federated Identity Manager Mitigation only Fix from $1,6002011-08-12 HIGH 7.2 CVE-2011-3123 IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, uses wea… Infosphere Datastage Mitigation only Fix from $1,9502011-08-10 HIGH 7.2 CVE-2011-3124 IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 and 8.5.0.1 and other products, assigns … Infosphere Datastage Mitigation only Fix from $1,9502011-08-10 HIGH 10.0 CVE-2011-2884 Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnera… Lotus Symphony No fix yet Fix from $1,9502011-07-27 MEDIUM 5.8 CVE-2011-1355 Open redirect vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.39 and 7.0 before 7.0.0.19 allows remote attackers to redirect… Websphere Application Server Mitigation only Fix from $1,6002011-07-19 MEDIUM 6.8 CVE-2010-3271 Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Applicat… Websphere Application Server after 7.0.0.13 Fix from $1,6002011-07-18 MEDIUM 5.0 CVE-2011-2758 IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not require authentication for … Tivoli Directory Server Mitigation only Fix from $1,6002011-07-17 MEDIUM 5.0 CVE-2011-2759 The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an o… Tivoli Directory Server Mitigation only Fix from $1,6002011-07-17 HIGH 7.2 CVE-2011-1222 Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x befo… Tivoli Storage Manager after 5.4.3.3 Fix from $1,9502011-07-17 HIGH 7.2 CVE-2011-1223 Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM)… Tivoli Storage Manager after 5.4.3.3 Fix from $1,9502011-07-17 HIGH 10.0 CVE-2011-2680 Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the "server e… Rational Doors Web Access Mitigation only Fix from $1,9502011-07-07 HIGH 10.0 CVE-2011-2681 IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors. Rational Doors Web Access Mitigation only Fix from $1,9502011-07-07 HIGH 9.0 CVE-2011-2330 Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 has an unspecified "built-in account" that is "trivially" accessed, w… Tivoli Management Framework No fix yet Fix from $1,9502011-06-02 HIGH 9.0 CVE-2011-1220EPSS 63% Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticate… Tivoli Management Framework Mitigation only Fix from $1,9502011-06-02 HIGH 9.3 CVE-2011-1215EPSS 6% Stack-based buffer overflow in mw8sr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitra… Lotus Notes after 8.5.2.2 Fix from $1,9502011-05-31 HIGH 9.3 CVE-2011-1216EPSS 6% Stack-based buffer overflow in assr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrar… Lotus Notes after 8.5.2.2 Fix from $1,9502011-05-31 HIGH 9.3 CVE-2011-1217EPSS 5% Buffer overflow in kpprzrdr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code v… Lotus Notes after 8.5.2.2 Fix from $1,9502011-05-31 HIGH 9.3 CVE-2011-1213EPSS 33% Integer underflow in lzhsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitrary code vi… Lotus Notes after 8.5.2.2 Fix from $1,9502011-05-31 HIGH 9.3 CVE-2011-1214EPSS 6% Stack-based buffer overflow in rtfsr.dll in Autonomy KeyView, as used in IBM Lotus Notes before 8.5.2 FP3, allows remote attackers to execute arbitra… Lotus Notes after 8.5.2.2 Fix from $1,9502011-05-31 HIGH 9.3 CVE-2011-2163 Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors. Systems Director No fix yet Fix from $1,9502011-05-20 HIGH 7.5 CVE-2011-2141 SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via… Datacap Taskmaster Capture Mitigation only Fix from $1,9502011-05-16 MEDIUM 6.8 CVE-2011-2143 IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an i… Datacap Taskmaster Capture Mitigation only Fix from $1,6002011-05-16