ibm

8,320 tracked vulnerabilities.

CVE-2020-4595 HIGH
IBM Security Guardium Insights 2.0.2 - Use of a Broken or Risky Cryptographic Algorithm
Jan 13, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-4594 HIGH
IBM Security Guardium Insights 2.0.2 - Use of a Broken or Risky Cryptographic Algorithm
Jan 13, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-4838 MEDIUM
IBM API Connect 5.0.0.0-5.0.8.10 - Stored Cross-Site Scripting in Web UI
Jan 12, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4674 MEDIUM
IBM Workload Automation 9.5 - Info Disclosure
Jan 12, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-4673 MEDIUM
IBM Workload Automation 9.5 - Info Disclosure
Jan 12, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-4869 MEDIUM
IBM MQ Appliance 9.2 CD and 9.2 LTS - Denial of Service via SNMP Query
Jan 11, 2021
CVSS 6.5
EPSS 0.02
CVE-2020-4733 MEDIUM
IBM Jazz Foundation - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4697 MEDIUM
IBM Jazz Foundation - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4691 MEDIUM
IBM Jazz Foundation Products - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4544 MEDIUM
IBM Jazz Foundation Products - Sensitive Information Exposure via Error Message
Jan 08, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-4487 MEDIUM
IBM Jazz Foundation Products - Sensitive Information Exposure via Detailed Technical Error Messages
Jan 08, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-5022 MEDIUM
IBM Spectrum Protect Plus 10.1.0-10.1.6 - Unauthenticated Information Disclosure via VDAP Proxy
Jan 08, 2021
CVSS 5.3
EPSS 0.01
CVE-2020-5021 MEDIUM
IBM Spectrum Protect Plus <10.1.7 - Privilege Escalation
Jan 08, 2021
CVSS 4.4
EPSS 0.00
CVE-2020-5020 MEDIUM
IBM Spectrum Protect Plus <10.1.6 - CSRF
Jan 08, 2021
CVSS 6.1
EPSS 0.01
CVE-2020-5019 MEDIUM
IBM Spectrum Protect Plus 10.1.0-10.1.6 - HTTP Header Injection via HOST Header
Jan 08, 2021
CVSS 6.5
EPSS 0.01
CVE-2020-5018 HIGH
IBM Spectrum Protect Plus 10.1.0-10.1.6 - Cleartext Storage of Sensitive Information in URLs
Jan 08, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-5017 MEDIUM
IBM Spectrum Protect Plus <10.1.7 - Info Disclosure
Jan 08, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-4667 MEDIUM
IBM Engineering Requirements Quality ... - Improper Input Validation
Jan 08, 2021
CVSS 4.3
EPSS 0.01
CVE-2020-4666 MEDIUM
IBM Engineering Requirements Quality Assistant On-Premises - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4664 MEDIUM
IBM Engineering Requirements Quality Assistant On-Premises - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4663 MEDIUM
IBM Engineering Requirements Quality Assistant On-Premises - Stored Cross-Site Scripting
Jan 08, 2021
CVSS 5.4
EPSS 0.01
CVE-2020-4606 MEDIUM
IBM Security Verify Privilege Manager < 10.8.2 - XML External Entity Injection
Jan 08, 2021
CVSS 4.4
EPSS 0.00
CVE-2020-4898 HIGH
IBM Emptoris Strategic Supply Management 10.1.3.0-10.1.3.29 - Use of a Broken or Risky Cryptographic Algorithm
Jan 07, 2021
CVSS 7.5
EPSS 0.01
CVE-2020-4897 MEDIUM
IBM Emptoris Contract Management and Spend Analysis 10.1.0-10.1.3 - Information Disclosure via Error Message
Jan 07, 2021
CVSS 5.3
EPSS 0.02
CVE-2020-4896 MEDIUM
IBM Emptoris Sourcing 10.1.0-10.1.3 - Web Cache Poisoning via HTTP Request Header Manipulation
Jan 07, 2021
CVSS 6.5
EPSS 0.01
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV