ibm

8,321 tracked vulnerabilities.

CVE-2015-1908
IBM WebSphere Portal 6.1.0-6.1.0.6, 6.1.5-6.1.5.3, 7.0.0-7.0.0.2, 8.0.0-8.0.0.1, 8.5.0 - Cross-Site Scripting
Apr 27, 2015
EPSS 0.02
CVE-2015-1886
IBM Websphere Portal - Resource Management Error
Apr 27, 2015
EPSS 0.03
CVE-2015-0176
IBM WebSphere MQ 8.0 - Cross-Site Scripting via Crafted URI in Error Response
Apr 27, 2015
EPSS 0.02
CVE-2015-0113
IBM Rational Software Architect Design Manager 4.0-4.0.7/5.0-5.0.2 - Unauthenticated JSP Source Code Exposure
Apr 27, 2015
EPSS 0.01
CVE-2015-1889
IBM InfoSphere BigInsights 3.0-3.0.0.2 SQL Injection via Big SQL
Apr 22, 2015
EPSS 0.02
CVE-2015-0135
IBM Domino 8.5-9.0 - Remote Code Execution or Denial of Service via Crafted GIF Image
Apr 21, 2015
EPSS 0.42
CVE-2015-1898
IBM Tivoli Storage Manager FastBack 6.1 - Local Privilege Escalation via Stack-Based Buffer Overflow
Apr 15, 2015
EPSS 0.00
CVE-2015-1897
IBM Tivoli Storage Manager FastBack 6.1 - Local Privilege Escalation via Stack-Based Buffer Overflow in FastBackMount
Apr 15, 2015
EPSS 0.00
CVE-2015-1893
IBM WebSphere DataPower XC10 Appliance Firmware < 2.1.0.3 - Session Hijacking
Apr 06, 2015
EPSS 0.02
CVE-2015-1890
IBM General Parallel File System 4.1 - Exposure of Sensitive Information via gpfs.snap Archive
Apr 06, 2015
EPSS 0.01
CVE-2015-0179
IBM Domino 8.5.x-8.5.3 FP6 IF6 and 9.x-9.0.1 FP3 IF1 - Local Privilege Escalation
Apr 06, 2015
EPSS 0.01
CVE-2015-0134
IBM Domino Buffer Overflow in SSLv2 Implementation
Apr 06, 2015
EPSS 0.05
CVE-2015-0119
IBM Tivoli Storage Manager FastBack < 6.1.11.1 - Remote Code Execution via FastBack Mount Port
Apr 06, 2015
EPSS 0.03
CVE-2015-0117
IBM Domino - Remote Code Execution or Denial of Service via LDAP Server
Apr 06, 2015
EPSS 0.04
CVE-2015-2808 LOW
Oracle Communications Application Session Controller 3.0.0-3.8.9 - Use of a Broken or Risky Cryptographic Algorithm
Apr 01, 2015
CVSS 3.7
EPSS 0.74
CVE-2015-1892
IBM Security Access Manager for Web 7.x < 7.0.0.12 and 8.x < 8.0.1.1 - Information Exposure via mDNS Responder
Apr 01, 2015
EPSS 0.02
CVE-2015-0138
IBM Tivoli Directory Server < 6.0.0.73 - TLS Cipher Downgrade via FREAK Attack
Mar 25, 2015
EPSS 0.03
CVE-2015-0199
IBM GPFS 3.4-3.4.0.31, 3.5-3.5.0.23, 4.1-4.1.0.6 DoS via mmfslinux Kernel Module ioctl
Mar 24, 2015
EPSS 0.00
CVE-2015-0198
IBM General Parallel File System 3.4-3.4.0.32, 3.5-3.5.0.24, 4.1-4.1.0.7 - Unauthenticated Remote Code Execution
Mar 24, 2015
EPSS 0.04
CVE-2015-0197
IBM General Parallel File System 3.4-3.4.0.31, 3.5-3.5.0.23, and 4.1-4.1.0.6 - Local Privilege Escalation
Mar 24, 2015
EPSS 0.00
CVE-2015-0158
IBM Business Process Manager 8.0-8.0.1.3, 8.5.0-8.5.0.1, 8.5.5-8.5.5.0 - Cross-Site Scripting via Crafted URL
Mar 24, 2015
EPSS 0.02
CVE-2015-0137
IBM PowerVC Standard 1.2.0.x-1.2.0.3 and 1.2.1.x-1.2.1.x - Certificate Spoofing via Man-in-the-Middle Attack
Mar 24, 2015
EPSS 0.01
CVE-2015-0136
IBM PowerVC 1.2.0.x-1.2.0.3 and 1.2.1.x-1.2.1.x - Exposure of Sensitive Information via Command Line Token
Mar 24, 2015
EPSS 0.00
CVE-2015-0106
IBM BPM 7.5.x-7.5.1.2, 8.0-8.0.1.3, 8.5.0-8.5.0.1, 8.5.5-8.5.5.0 & WebSphere Lombardi 7.2.x-7.2.0.5 XSS via Crafted URL
Mar 24, 2015
EPSS 0.01
CVE-2015-0105
IBM Business Process Manager 8.0-8.0.1.3, 8.5.0-8.5.0.1, 8.5.5-8.5.5.0 - Cross-Site Scripting via Process Portal URL
Mar 24, 2015
EPSS 0.02
Products
websphere_application_server 465 aix 400 db2 341 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV