Browse CVEs

MEDIUM 5.5 CVE-2021-20546 IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local atta… Spectrum Protect Client after 8.1.11.0 Fix from $1,6002021-04-26 HIGH 7.8 CVE-2021-20532 IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to … Spectrum Protect Backup Archive Client after 8.1.11.0 Fix from $1,9502021-04-26 MEDIUM 6.5 CVE-2021-20432 IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actio… Spectrum Protect Plus after 10.1.7 Fix from $1,6002021-04-26 MEDIUM 5.3 CVE-2020-4562 IBM Planning Analytics 2.0 could allow a remote attacker to obtain sensitive information by allowing cross-window communication with unrestricted tar… Planning Analytics Mitigation only Fix from $1,6002021-04-26 HIGH 8.2 CVE-2021-20454 IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A rem… Websphere Application Server after 9.0.5.7 Fix from $1,9502021-04-21 HIGH 8.2 CVE-2021-20501 IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by usin… I Mitigation only Fix from $1,9502021-04-21 HIGH 8.2 CVE-2021-20453 IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote a… Websphere Application Server 8.0.0.15 / 8.5.5.20+ Fix from $1,9502021-04-20 HIGH 7.2 CVE-2021-20527 IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198… Resilient 38.2.41 / 39.0.6536+ Fix from $1,9502021-04-19 MEDIUM 5.4 CVE-2021-20519 IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web U… Collaborative Lifecycle Management Patch available Fix from $1,6002021-04-12 HIGH 7.5 CVE-2020-4965 IBM Jazz Team Server products use weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.… Collaborative Lifecycle Management Patch available Fix from $1,9502021-04-12 MEDIUM 5.4 CVE-2020-4920 IBM Jazz Team Server products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in th… Collaborative Lifecycle Management Patch available Fix from $1,6002021-04-12 MEDIUM 6.5 CVE-2021-20480 IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a rem… Websphere Application Server after 8.5.5.19 Fix from $1,6002021-04-08 MEDIUM 5.4 CVE-2020-4792 IBM Edge 4.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th… Edge Application Manager Patch available Fix from $1,6002021-04-05 MEDIUM 5.4 CVE-2020-4997 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… Infosphere Information Server Patch available Fix from $1,6002021-04-05 HIGH 7.1 CVE-2021-20502 IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploi… Engineering Insights Patch available Fix from $1,9502021-03-30 MEDIUM 5.4 CVE-2021-20352 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20447 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20503 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20504 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20506 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20518 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2021-20520 IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… Engineering Insights Patch available Fix from $1,6002021-03-30 HIGH 7.1 CVE-2021-20482 IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo… Cloud Pak For Automation Mitigation only Fix from $1,9502021-03-30 MEDIUM 5.5 CVE-2020-4884 IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 stores user credentials in plain in clear text which can be read by a local user. IBM X-Forc… Urbancode Deploy Mitigation only Fix from $1,6002021-03-30 MEDIUM 5.5 CVE-2020-4944 IBM UrbanCode Deploy (UCD) 7.0.3.0, 7.0.4.0, 7.0.5.3, 7.0.5.4, 7.1.0.0, 7.1.1.0, 7.1.1.1, and 7.1.1.2, stores keystore passwords in plain text after … Urbancode Deploy Mitigation only Fix from $1,6002021-03-30 MEDIUM 5.4 CVE-2020-4848 IBM UrbanCode Deploy (UCD) 6.2.7.9, 7.0.5.4, and 7.1.1.1 could allow an authenticated user to initiate a plugin or compare process resources that the… Urbancode Deploy Mitigation only Fix from $1,6002021-03-30 HIGH 7.5 CVE-2020-5015 IBM Elastic Storage System 6.0.0 through 6.0.1.2 and IBM Elastic Storage Server 5.3.0 through 5.3.6.2 could allow a remote attacker to cause a denial… Elastic Storage Server after 6.0.1.2 Fix from $1,9502021-03-24 MEDIUM 6.1 CVE-2020-4882 IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This co… Planning Analytics Mitigation only Fix from $1,6002021-03-22 MEDIUM 5.3 CVE-2020-4635 IBM Resilient SOAR 40 and earlier could disclose sensitive information by allowing a user to enumerate usernames. Soar Patch available Fix from $1,6002021-03-19 MEDIUM 5.5 CVE-2020-4851 IBM Spectrum Scale 5.0.0 through 5.0.5.5 and 5.1.0 through 5.1.0.2 could allow a local user to poison log files which could impact support and develo… Spectrum Scale 5.0.5.5 / 5.1.0.2+ Fix from $1,6002021-03-16