ibm

8,320 tracked vulnerabilities.

CVE-2020-4209 MEDIUM
IBM Spectrum Protect Plus 10.1.0-10.1.5 - Path Traversal via URL Request
May 04, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-4329 MEDIUM
IBM WebSphere Application Server <20.0.0.4 - Info Disclosure
Apr 28, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-4267 MEDIUM
IBM MQ 8.0.0.0-8.0.0.13, 9.1.0.0-9.1.0.3 & MQ Appliance 9.1.0-9.1.4 - Authenticated DoS via Memory Leak
Apr 24, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-4415 CRITICAL
IBM Spectrum Protect 7.1.0.0-7.1.9.9 - Stack-Based Buffer Overflow via Improper Bounds Checking
Apr 23, 2020
CVSS 9.8
EPSS 0.08
CVE-2020-4353 MEDIUM
IBM MaaS360 < 6.82 - Application Crash Leading to Unauthorized Access
Apr 23, 2020
CVSS 4.6
EPSS 0.00
CVE-2020-4311 HIGH
IBM Tivoli Monitoring 6.3.0 - Arbitrary Code Execution via DLL Hijacking
Apr 23, 2020
CVSS 7.0
EPSS 0.00
CVE-2020-4202 HIGH
IBM UrbanCode Deploy <7.0.4.0 - Privilege Escalation
Apr 23, 2020
CVSS 8.8
EPSS 0.01
CVE-2020-4277 HIGH
IBM TRIRIGA Application Platform 3.5.3 and 3.6.1 - Sensitive Information Exposure via Error Messages
Apr 17, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-4347 HIGH
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 - Privilege Escalation via Inappropriate File Permissions
Apr 16, 2020
CVSS 7.3
EPSS 0.02
CVE-2020-4338 MEDIUM
IBM MQ 9.1.0-9.1.4 - Sensitive Information Exposure via runmqras Data
Apr 16, 2020
CVSS 5.5
EPSS 0.00
CVE-2020-4260 MEDIUM
IBM UrbanCode Deploy <7.0.5 - Info Disclosure
Apr 16, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-4294 MEDIUM
IBM QRadar 7.3.0-7.3.3 Patch 2 - Authenticated Server-Side Request Forgery
Apr 15, 2020
CVSS 6.3
EPSS 0.01
CVE-2020-4274 MEDIUM
IBM QRadar 7.3.0-7.3.3 Patch 2 - Authenticated Unauthorized Data Access via Inadequate Permission Checks
Apr 15, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-4272 HIGH
IBM QRadar 7.3.0-7.3.3 Patch 2 - Remote File Inclusion and Arbitrary Code Execution
Apr 15, 2020
CVSS 8.8
EPSS 0.03
CVE-2020-4271 MEDIUM
IBM QRadar 7.3.0-7.3.3 Patch 2 - Authenticated Remote Code Execution via PHP Object Injection
Apr 15, 2020
CVSS 6.3
EPSS 0.02
CVE-2020-4270 HIGH
IBM QRadar 7.3.0-7.3.3 Patch 2 - Privilege Escalation via Weak File Permissions
Apr 15, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-4269 HIGH
IBM QRadar 7.3.0-7.3.3 Patch 2 - Use of Hard-coded Credentials
Apr 15, 2020
CVSS 7.5
EPSS 0.02
CVE-2020-4268 MEDIUM
IBM QRadar 7.3.0-7.3.3 Patch 2 - Stored Cross-Site Scripting
Apr 15, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-4151 MEDIUM
IBM QRadar SIEM 7.3.0-7.3.3 - Authenticated Unauthorized Action via Improper Input Validation
Apr 14, 2020
CVSS 6.5
EPSS 0.01
CVE-2020-4362 HIGH
IBM WebSphere Application Server 7.0.0.0-7.0.0.44 - Privilege Escalation via SOAP Connector Token-Based Authentication
Apr 10, 2020
CVSS 8.8
EPSS 0.02
CVE-2020-4291 MEDIUM
IBM Security Information Queue <1.0.6 - Info Disclosure
Apr 08, 2020
CVSS 4.3
EPSS 0.01
CVE-2020-4290 MEDIUM
IBM Security Information Queue 1.0.0-1.0.5 - Authenticated Configuration Owner Spoofing
Apr 08, 2020
CVSS 5.4
EPSS 0.01
CVE-2020-4289 MEDIUM
IBM Security Information Queue 1.0.0-1.0.5 - Sensitive Information Exposure via Missing HTTPOnly Flag
Apr 08, 2020
CVSS 5.3
EPSS 0.02
CVE-2020-4284 MEDIUM
IBM Security Information Queue 1.0.0-1.0.5 - Information Disclosure via Insufficient Session Expiration
Apr 08, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-4282 MEDIUM
IBM Security Information Queue <1.0.6 - Auth Bypass
Apr 08, 2020
CVSS 4.3
EPSS 0.01
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV