ibm

8,320 tracked vulnerabilities.

CVE-2019-4071 HIGH
IBM Tivoli Storage Productivity Center <5.2.17 - Command Injection
May 09, 2019
CVSS 8.8
EPSS 0.04
CVE-2019-4208 HIGH
IBM TRIRIGA Application Platform 3.5.3-3.5.3.5 - XML External Entity Injection
May 07, 2019
CVSS 7.1
EPSS 0.02
CVE-2019-4207 LOW
IBM TRIRIGA <3.6.0 - Info Disclosure
May 07, 2019
CVSS 3.3
EPSS 0.00
CVE-2019-4258 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 - Cross-Site Scripting
May 01, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4166 MEDIUM
IBM StoredIQ 7.6.0.0-7.6.0.17 - Open Redirect
Apr 30, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-4047 MEDIUM
IBM Jazz Reporting Service 6.0.6 - Authenticated Information Disclosure via Execution Log Files
Apr 29, 2019
CVSS 4.3
EPSS 0.01
CVE-2019-4238 MEDIUM
IBM InfoSphere Information Server 11.3, 11.5, 11.7 - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4222 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Authenticated Improper Privilege Management
Apr 25, 2019
CVSS 4.3
EPSS 0.01
CVE-2019-4148 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4146 LOW
IBM Sterling B2B Integrator <6.0.0.1 - Info Disclosure
Apr 25, 2019
CVSS 3.1
EPSS 0.01
CVE-2019-4092 MEDIUM
IBM Content Navigator 2.0.3 and 3.0CD - Open Redirect via Crafted URL
Apr 25, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-4077 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4076 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4075 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 - Stored Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4074 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4073 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.0.1 - Stored Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-4033 MEDIUM
IBM Content Navigator 2.0.3 and 3.0CD - Cross-Site Scripting
Apr 25, 2019
CVSS 5.4
EPSS 0.01
CVE-2019-6157 MEDIUM
Lenovo Flex System and System x Firmware < 5.30 - Sensitive Information Exposure via IMM2 FFDC Log
Apr 22, 2019
CVSS 6.5
EPSS 0.01
CVE-2019-6155 MEDIUM
IBM BladeCenter HS23 Firmware < 3.0.0 - Denial of Service
Apr 22, 2019
CVSS 4.1
EPSS 0.01
CVE-2019-4055 HIGH
IBM MQ 8.0.0.0-8.0.0.10, 9.0.0.0-9.0.0.5, 9.1.0.0-9.1.1 - Denial of Service via TLS Key Renegotiation
Apr 19, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-4203 CRITICAL
IBM API Connect 5.0.0.0-5.0.8.6 - Server-Side Request Forgery via Developer Portal
Apr 15, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-4202 CRITICAL
IBM API Connect 5.0.0.0-5.0.8.6 - OS Command Injection
Apr 15, 2019
CVSS 10.0
EPSS 0.04
CVE-2019-4178 MEDIUM
IBM Cognos Analytics 11.0.0.0-11.0.12.9 - Path Traversal and Arbitrary File Write
Apr 15, 2019
CVSS 6.4
EPSS 0.03
CVE-2019-4012 CRITICAL
IBM BigFix WebUI Profile Management 6 and Software Distribution 23 - SQL Injection
Apr 15, 2019
CVSS 9.8
EPSS 0.02
CVE-2019-4013 CRITICAL
IBM BigFix Platform 9.5.0-9.5.10 - Authenticated Arbitrary File Upload and Remote Code Execution
Apr 10, 2019
CVSS 9.0
EPSS 0.14
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV