ibm

8,320 tracked vulnerabilities.

CVE-2020-28198 HIGH
IBM Tivoli Storage Manager 5.2 - Stack Buffer Overflow via 'id' Parameter in Interactive Mode
May 06, 2021
CVSS 7.0
EPSS 0.00
CVE-2020-5013 HIGH
IBM QRadar SIEM 7.3-7.4 - XML External Entity Injection
May 05, 2021
CVSS 8.1
EPSS 0.01
CVE-2020-4993 MEDIUM
IBM QRadar SIEM 7.3-7.4 - Path Traversal via Zip File Decompression
May 05, 2021
CVSS 4.9
EPSS 0.01
CVE-2020-4979 CRITICAL
IBM QRadar SIEM 7.3-7.4 - Remote Code Execution via Insecure Inter-Deployment Communication
May 05, 2021
CVSS 9.8
EPSS 0.02
CVE-2020-4932 HIGH
IBM QRadar SIEM 7.3-7.4 - Use of Hard-coded Credentials
May 05, 2021
CVSS 7.8
EPSS 0.00
CVE-2020-4929 MEDIUM
IBM QRadar SIEM 7.3-7.4 - Stored Cross-Site Scripting
May 05, 2021
CVSS 5.4
EPSS 0.00
CVE-2020-4883 MEDIUM
IBM QRadar SIEM <7.4 - Info Disclosure
May 05, 2021
CVSS 6.5
EPSS 0.01
CVE-2020-4987 MEDIUM
IBM FlashSystem 900 Firmware < 1.5.2.9 and <= 1.6.1.2 - Stored Cross-Site Scripting
May 04, 2021
CVSS 5.4
EPSS 0.00
CVE-2020-4981 MEDIUM
IBM Spectrum Scale 5.0.4.1-5.1.0.3 - Authenticated Arbitrary File Write via Improper Input Validation
Apr 27, 2021
CVSS 6.0
EPSS 0.00
CVE-2020-4562 MEDIUM
IBM Planning Analytics 2.0 - Info Disclosure
Apr 26, 2021
CVSS 5.3
EPSS 0.01
CVE-2020-4965 HIGH
IBM Collaborative Lifecycle Management - Use of a Broken or Risky Cryptographic Algorithm
Apr 12, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-4964 MEDIUM
IBM Jazz Team Server - Info Disclosure
Apr 12, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-4920 MEDIUM
IBM Collaborative Lifecycle Management - Stored Cross-Site Scripting
Apr 12, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4997 MEDIUM
IBM InfoSphere Information Server 11.7 - Cross-Site Scripting
Apr 05, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4792 MEDIUM
IBM Edge Application Manager 4.2 - Stored Cross-Site Scripting
Apr 05, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4944 MEDIUM
IBM UrbanCode Deploy Cleartext Storage of Sensitive Information
Mar 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-4884 MEDIUM
IBM UrbanCode Deploy 6.2.7.9, 7.0.5.4, and 7.1.1.1 - Cleartext Storage of Sensitive Information
Mar 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-4848 MEDIUM
IBM UrbanCode Deploy <7.1.1.1 - Privilege Escalation
Mar 30, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-5015 HIGH
IBM Elastic Storage System 6.0.0-6.0.1.2 & Server 5.3.0-5.3.6.2 DoS via Malformed UDP
Mar 24, 2021
CVSS 7.5
EPSS 0.02
CVE-2020-4882 MEDIUM
IBM Planning Analytics 2.0 - Server-Side Request Forgery via User-Controlled URL
Mar 22, 2021
CVSS 6.1
EPSS 0.01
CVE-2020-4635 MEDIUM
IBM Resilient SOAR <40 - Info Disclosure
Mar 19, 2021
CVSS 5.3
EPSS 0.01
CVE-2020-4891 MEDIUM
IBM Spectrum Scale 5.0.0-5.0.5.5 and 5.1.0-5.1.0.2 - Brute Force Attack via Inadequate Account Lockout
Mar 16, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-4890 MEDIUM
IBM Spectrum Scale 5.0.0-5.0.5.5 and 5.1.0-5.1.0.2 - Denial of Service via REST API Rate Limit Bypass
Mar 16, 2021
CVSS 4.4
EPSS 0.00
CVE-2020-4851 MEDIUM
IBM Spectrum Scale 5.0.0-5.0.5.5 and 5.1.0-5.1.0.2 - Log Poisoning via Local User Input
Mar 16, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-4184 HIGH
IBM Security Guardium 11.2 - Improper Privilege Management
Mar 15, 2021
CVSS 7.3
EPSS 0.01
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV