ibm

8,321 tracked vulnerabilities.

CVE-2013-6728
IBM WebSphere Dashboard Framework 6.1.5/7.0.1 - Arbitrary File Read/Delete via Charting
Feb 14, 2014
EPSS 0.01
CVE-2013-5400
IBM Platform Symphony DE <6.1.1 - Auth Bypass
Feb 14, 2014
EPSS 0.02
CVE-2013-6332
IBM Algo One UDS 4.7.0-5.0.0 - Authenticated Arbitrary File Upload and Remote Code Execution via JSP File
Feb 06, 2014
EPSS 0.02
CVE-2013-2962
IBM WebSphere Transformation Extender <8.4.0.4 - Buffer Overflow
Feb 06, 2014
EPSS 0.00
CVE-2013-5427
IBM InfoSphere Master Data Management Collaboration Server 10.x-11.0 - Cross-Site Request Forgery
Feb 04, 2014
EPSS 0.01
CVE-2013-6724
IBM SPSS SamplePower 3.0.1 - Remote Code Execution via vsflex8l ActiveX ComboList Property
Feb 01, 2014
EPSS 0.03
CVE-2013-4043
IBM SPSS Collaboration and Deployment Services 4.x-4.2.1.2, 5.x-5.0 FP2, 6.x-6.0 - Unauthenticated Arbitrary File Read
Feb 01, 2014
EPSS 0.01
CVE-2013-6727
IBM Sametime 8.5.2-8.5.2.1 and 9.0 - Information Disclosure via Unsigned Java Plugins
Jan 31, 2014
EPSS 0.02
CVE-2013-6749
IBM Lotus Quickr for Domino 8.5.1 - Buffer Overflow in ActiveX Control
Jan 29, 2014
EPSS 0.04
CVE-2013-6748
IBM Lotus Quickr for Domino 8.5.1 - Remote Code Execution via ActiveX Control Buffer Overflow
Jan 29, 2014
EPSS 0.03
CVE-2013-2974
IBM Tivoli Application Dependency Discovery Manager 7.2.1.x - Privilege Escalation and SQL Injection
Jan 29, 2014
EPSS 0.01
CVE-2013-6747
IBM GSKit 7.x < 7.0.4.48 and 8.x < 8.0.50.16 - Denial of Service via Malformed X.509 Certificate Chain
Jan 27, 2014
EPSS 0.02
CVE-2013-5371
IBM Tivoli Storage Manager <6.4.0 - Info Disclosure
Jan 23, 2014
EPSS 0.00
CVE-2013-6746
IBM FileNet P8 Platform Documentation Installable Info Center 4.5.1-5.2.0 - Cross-Site Scripting
Jan 22, 2014
EPSS 0.01
CVE-2013-0485
IBM Java SDK 7 < SR4-FP1, 6 < SR13-FP1, 5.0 < SR16-FP1, 1.4.2 < SR13-FP16 - Unspecified Vulnerability in Class Libraries
Jan 21, 2014
EPSS 0.02
CVE-2013-6305
IBM Platform Symphony 5.2-6.1.0.1 - Sensitive Information Exposure via Shared Credentials Encryption Key
Jan 21, 2014
EPSS 0.01
CVE-2013-5429
IBM Tivoli Federated Identity Manager <6.2.2 - Info Disclosure
Jan 21, 2014
EPSS 0.01
CVE-2013-4030
IBM Integrated Management Module 2 1.00-2.00 - Weak SSL/TLS Encryption
Jan 21, 2014
EPSS 0.01
CVE-2013-6725
IBM WebSphere Application Server 7.x < 7.0.0.31, 8.0.x < 8.0.0.8, 8.5.x < 8.5.5.2 - XSS in Administrative Console
Jan 16, 2014
EPSS 0.02
CVE-2013-6330
IBM WebSphere Application Server 7.x < 7.0.0.31 - Authenticated Sensitive Information Exposure via Static File Caching
Jan 16, 2014
EPSS 0.01
CVE-2013-6325
IBM WebSphere Application Server DoS via Crafted Web Services Request
Jan 16, 2014
EPSS 0.02
CVE-2013-6334
IBM Atlas Suite - Unauthenticated Access Control Bypass via Compliance Questionnaire Save Draft Servlet
Jan 10, 2014
EPSS 0.01
CVE-2013-6321
IBM Atlas Suite - SQL Injection
Jan 10, 2014
EPSS 0.01
CVE-2013-5385
IBM i 6.1 and 7.1 - Denial of Service via OSPF LSA Packet Handling
Jan 02, 2014
EPSS 0.03
CVE-2013-5420
IBM Security Access Manager for Enterprise Single Sign-On 8.2 - Authenticated Log File Exposure via Direct Request
Dec 23, 2013
EPSS 0.01
Products
websphere_application_server 465 aix 400 db2 341 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV