IBM Corporation

285 tracked vulnerabilities.

CVE-2017-1145 HIGH
IBM WebSphere MQ 8.0.0.6 - Denial of Service via Channel Agent Resource Exhaustion
Mar 20, 2017
CVSS 8.6
EPSS 0.00
CVE-2017-1134 HIGH
IBM Reliable Scalable Cluster Technology - Privilege Escalation
Mar 20, 2017
CVSS 7.8
EPSS 0.00
CVE-2017-1150 LOW
IBM DB2 10.1 10.5 11.1 - Authenticated Improper Privilege Management
Mar 08, 2017
CVSS 3.1
EPSS 0.00
CVE-2017-1133 MEDIUM
IBM QRadar Incident Forensics - Cross-Site Scripting
Mar 07, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-1124 LOW
IBM Maximo Asset Mgmt <7.6 - Info Disclosure
Mar 07, 2017
CVSS 2.9
EPSS 0.00
CVE-2017-1121 MEDIUM
IBM WebSphere Application Server - XSS
Feb 13, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-1128 MEDIUM
IBM Rational DOORS Next Generation <6.0 - XSS
Feb 08, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-1127 MEDIUM
IBM Rational DOORS Next Generation <6.0 - XSS
Feb 08, 2017
CVSS 5.4
EPSS 0.00
CVE-2017-1093 HIGH
IBM AIX 6.1, 7.1, and 7.2 - Local Privilege Escalation via bellmail Binary
Feb 02, 2017
CVSS 7.8
EPSS 0.00
CVE-2016-6112 HIGH
IBM Distributed Marketing and Marketing Platform <10.0 - Privilege ...
May 22, 2017
CVSS 8.8
EPSS 0.00
CVE-2016-9750 MEDIUM
IBM QRadar SIEM 7.2-7.3 - Authenticated Plaintext Credential Exposure
May 15, 2017
CVSS 6.5
EPSS 0.00
CVE-2016-9735 MEDIUM
IBM Rational Collaborative Lifecycle Management - Authenticated Sensitive Information Exposure via Stack Trace
May 15, 2017
CVSS 4.3
EPSS 0.00
CVE-2016-5979 LOW
IBM Distributed Marketing <10.0 - Privilege Escalation
May 15, 2017
CVSS 2.7
EPSS 0.00
CVE-2016-6037 MEDIUM
IBM Rational Team Concert - Stored Cross-Site Scripting via Malicious Project HTML
May 10, 2017
CVSS 4.8
EPSS 0.00
CVE-2016-6035 MEDIUM
IBM Rational Quality Manager - Stored Cross-Site Scripting
May 10, 2017
CVSS 5.4
EPSS 0.00
CVE-2016-5889 HIGH
IBM Interact 8.6, 9.0, 9.1, 10.0 - Cross-Site Request Forgery
May 10, 2017
CVSS 8.8
EPSS 0.00
CVE-2016-5888 MEDIUM
IBM Interact 8.6, 9.0, 9.1, 10.0 - Cross-Site Scripting
May 10, 2017
CVSS 5.4
EPSS 0.00
CVE-2016-3032 MEDIUM
IBM Cognos Analytics 11.0 - Cross-Site Scripting
May 10, 2017
CVSS 5.4
EPSS 0.00
CVE-2016-9692 HIGH
IBM WebSphere Cast Iron Solution 7.0.0-7.5.0.0 - Server-Side Request Forgery via Improper Input Validation
May 05, 2017
CVSS 8.6
EPSS 0.01
CVE-2016-9691 HIGH
IBM WebSphere Cast Iron Solution 7.0.0-7.5.0.0 - XML External Entity Injection
May 05, 2017
CVSS 8.6
EPSS 0.00
CVE-2016-0255 MEDIUM
IBM Marketing Platform 9.1, 9.1.1, 9.1.2, 10.0 - Stored Cross-Site Scripting
May 05, 2017
CVSS 6.1
EPSS 0.00
CVE-2016-9976 HIGH
IBM Maximo Asset Management 7.1, 7.5, 7.6 - Remote Code Execution via Arbitrary File Inclusion
May 03, 2017
CVSS 8.4
EPSS 0.02
CVE-2016-2930 HIGH
IBM BigFix Remote Control 9.1.3 - Unauthenticated Privilege Escalation
May 03, 2017
CVSS 7.5
EPSS 0.00
CVE-2016-0382 MEDIUM
IBM Tealeaf Consumer Experience <9.0 - Info Disclosure
May 03, 2017
CVSS 4.0
EPSS 0.00
CVE-2016-8962 MEDIUM
IBM BigFix Inventory 9.2 - Info Disclosure
Apr 26, 2017
CVSS 5.9
EPSS 0.00
Products
Kenexa LMS on Cloud 21 Rational Collaborative Lifecycle Management 17 Access Manager 16 QRadar SIEM 13 Key Lifecycle Manager 12 Kenexa LCMS Premier on Cloud 11 BigFix Inventory 8 WebSphere MQ 8 BigFix Platform 7 UrbanCode Deploy 7 InfoSphere Information Server 6 Jazz Reporting Service 6 TRIRIGA Application Platform 6 AIX 5 Connections 5 Maximo Asset Management 5 Privileged Identity Manager 5 Rational DOORS Next Generation 5 Rational Rhapsody Design Manager 5 Tivoli Storage Manager 5 Cloud Orchestrator 4 Cognos Business Intelligence 4 Domino 4 Integration Bus 4 Tivoli Storage Manager Extended Edition 4 WebSphere Application Server 4 WebSphere Portal 4 Business Process Manager Advanced 3 Cognos Analytics 3 Cognos TM1 3
Quick Filters
Critical CVEs With Exploits In CISA KEV