Browse CVEs

CRITICAL 9.1 CVE-2020-5003 IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker co… Financial Transaction Manager Mitigation only Fix from $2,3002021-06-11 HIGH 8.8 CVE-2021-20517 IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker coul… Websphere Application Server Nd 8.5.5.20 / 9.0.5.8+ Fix from $1,9502021-06-07 MEDIUM 5.3 CVE-2020-5008 IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may l… Datapower Gateway after 2018.4.1.14 Fix from $1,6002021-06-07 HIGH 7.5 CVE-2021-20380 IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP… Qradar Advisor With Watson 2.6.1+ Fix from $1,9502021-06-03 HIGH 8.8 CVE-2020-4495 IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to bypass security restrictions, caused by improper access control. By… Collaborative Lifecycle Management Patch available Fix from $1,9502021-06-02 MEDIUM 6.5 CVE-2020-4732 IBM Jazz Foundation and IBM Engineering products could allow an authenticated user to obtain sensitive information due to lack of security restrictio… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 6.5 CVE-2021-20371 IBM Jazz Foundation and IBM Engineering products could allow a remote attacker to obtain sensitive information when an error message is returned in t… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2020-4977 IBM Engineering Lifecycle Optimization - Publishing is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary … Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2020-5030 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20338 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20343 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20345 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20346 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20347 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-20348 IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to se… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-29668 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 MEDIUM 5.4 CVE-2021-29670 IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip… Collaborative Lifecycle Management Patch available Fix from $1,6002021-06-02 HIGH 7.8 CVE-2021-29665 IBM Security Verify Access 20.07 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which could allow a local attacke… Security Verify Access Mitigation only Fix from $1,9502021-06-01 HIGH 7.8 CVE-2021-29740 IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.3 system core component is affected by a format string security vulnerability. An at… Spectrum Scale 5.0.5.7 / 5.1.1.0+ Fix from $1,9502021-06-01 CRITICAL 10.0 CVE-2020-4561 IBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacker who c… Cognos Analytics Patch available Fix from $2,3002021-06-01 HIGH 8.8 CVE-2020-4520 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to inject malicious HTML code that when viewed by the authenticated victim would exe… Cognos Analytics Patch available Fix from $1,9502021-06-01 HIGH 8.2 CVE-2020-4300 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could e… Cognos Analytics Patch available Fix from $1,9502021-06-01 HIGH 7.5 CVE-2019-4723 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in N… Cognos Analytics Patch available Fix from $1,9502021-06-01 HIGH 7.5 CVE-2019-4724 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain credentials from a user's browser via incorrect autocomplete settings in N… Cognos Analytics Patch available Fix from $1,9502021-06-01 HIGH 7.5 CVE-2021-20576 IBM Security Verify Access 20.07 could allow a remote attacker to send a specially crafted HTTP GET request that could cause the application to crash. Application Gateway Patch available Fix from $1,9502021-06-01 HIGH 7.1 CVE-2019-4730 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could e… Cognos Analytics Patch available Fix from $1,9502021-06-01 MEDIUM 6.5 CVE-2019-4471 IBM Cognos Analytics 11.0 and 11.1 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for a … Cognos Analytics Patch available Fix from $1,6002021-06-01 MEDIUM 5.4 CVE-2019-4653 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Cognos Analytics Patch available Fix from $1,6002021-06-01 MEDIUM 5.4 CVE-2020-4354 IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the W… Cognos Analytics Patch available Fix from $1,6002021-06-01 MEDIUM 5.3 CVE-2021-20585 IBM Security Verify Access 20.07 could disclose sensitive information in HTTP server headers that could be used in further attacks against the system… Security Verify Access Mitigation only Fix from $1,6002021-06-01