ibm

8,321 tracked vulnerabilities.

CVE-2015-0103
IBM Business Process Manager 8.0-8.0.1.3, 8.5.0-8.5.0.1, 8.5.5-8.5.5.0 - Authenticated Cross-Site Scripting
Mar 24, 2015
EPSS 0.01
CVE-2015-0178
IBM Liberty < 1.12-20150130-1059 - Exposure of Sensitive Information via Java Overlay Feature
Mar 18, 2015
EPSS 0.02
CVE-2015-0149
IBM API Management 3.0 - Authenticated Unauthorized API Access
Mar 18, 2015
EPSS 0.01
CVE-2015-0146
IBM Content Collector for Email 3.0-4.0 - Information Disclosure via Crafted Search Query
Mar 18, 2015
EPSS 0.00
CVE-2015-0132
IBM Rational Requirements Composer DoS via XML Entity Expansion
Mar 18, 2015
EPSS 0.01
CVE-2015-0128
IBM Rational Quality Manager 2.x-3.x < 3.0.1.6 iFix4, 4.x < 4.0.7 iFix3, 5.x < 5.0.2 - Cross-Site Scripting
Mar 18, 2015
EPSS 0.01
CVE-2015-0125
IBM Rational DOORS Next Generation & Rational Requirements Composer XSS via Crafted URL
Mar 18, 2015
EPSS 0.01
CVE-2015-0124
IBM Rational Quality Manager 2.x-3.x < 3.0.1.6 iFix4, 4.x < 4.0.7 iFix3, 5.x < 5.0.2 - Cross-Site Scripting
Mar 18, 2015
EPSS 0.01
CVE-2015-0177
IBM WebSphere Portal 8.5.0 - Authenticated Cross-Site Scripting via Crafted URL
Mar 13, 2015
EPSS 0.01
CVE-2015-0139
IBM WebSphere Portal 8.0.0-8.0.0.1 CF15 and 8.5.0 < CF05 - Authenticated Cross-Site Scripting via Crafted URL
Mar 13, 2015
EPSS 0.01
CVE-2015-0133
IBM WebSphere Commerce 7.0 Feature Pack 4-8 - XML External Entity Injection
Mar 13, 2015
EPSS 0.02
CVE-2015-0129
IBM Rational Quality Manager 4.x-4.0.7 and 5.x-5.0.2 - Authenticated Cross-Site Scripting via Crafted URL
Mar 13, 2015
EPSS 0.01
CVE-2015-0123
IBM Rational Team Concert < 3.0.1.6 iFix 5, < 4.0.7 iFix3, < 5.0.2 - Authenticated XSS via Crafted URL
Mar 13, 2015
EPSS 0.01
CVE-2015-0122
IBM Rational Team Concert < 3.0.1.6 iFix 5, < 4.0.7 iFix3, < 5.0.2 - Authenticated XSS via Crafted URL
Mar 13, 2015
EPSS 0.01
CVE-2015-0109
IBM Maximo Asset Management 7.1-7.1.1.8 and 7.2 - Authenticated Cross-Site Scripting
Feb 18, 2015
EPSS 0.01
CVE-2015-0108
IBM Maximo Asset Management 7.1-7.1.1.8 and 7.2 - Authenticated Cross-Site Scripting
Feb 18, 2015
EPSS 0.01
CVE-2015-0235
Exim GHOST (glibc gethostbyname) Buffer Overflow
Jan 28, 2015
EPSS 0.95
CVE-2014-0841 MEDIUM
IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, 6.6.0 - Weak Password Hashing
Apr 27, 2018
CVSS 5.3
EPSS 0.00
CVE-2014-0882 MEDIUM
IBM Integrated Management Module Firmware - Authenticated Exposure of Sensitive Information via Service Advisor Data
Apr 25, 2018
CVSS 6.5
EPSS 0.01
CVE-2014-0881 HIGH
IBM Integrated Management Module Firmware 1.00-3.56 - Improper Access Control in TPM Configuration
Apr 25, 2018
CVSS 7.4
EPSS 0.02
CVE-2014-0872 MEDIUM
IBM Security Key Lifecycle Manager 2.5 - Unencrypted Credential Storage
Apr 25, 2018
CVSS 4.1
EPSS 0.00
CVE-2014-0950 HIGH
IBM Rational ClearQuest 7.1.1-7.1.1.9, 7.1.2-7.1.2.13, 8.0.0-8.0.0.10, 8.0.1-8.0.1.3 - XML External Entity Injection
Apr 20, 2018
CVSS 7.1
EPSS 0.02
CVE-2014-0931 CRITICAL
IBM Rational ClearCase 7.1-7.1.2.13, 8.0-8.0.0.10, 8.0.1-8.0.1.3 - XML External Entity Injection
Apr 20, 2018
CVSS 9.1
EPSS 0.03
CVE-2014-0927 HIGH
IBM Sterling B2B Integrator & File Gateway - Unauthenticated Authentication Bypass via ActiveMQ
Apr 20, 2018
CVSS 8.1
EPSS 0.02
CVE-2014-0912 MEDIUM
IBM Sterling B2B Integrator and Sterling File Gateway - Exposure of Sensitive Information via Error Page
Apr 20, 2018
CVSS 5.3
EPSS 0.02
Products
websphere_application_server 465 aix 400 db2 341 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV