ibm

8,321 tracked vulnerabilities.

CVE-2012-3296
IBM Power HMC <7R7.1.0-7R7.3.0 - XSS
Aug 17, 2012
EPSS 0.02
CVE-2012-2205
IBM Rational ClearQuest 7.1.x-7.1.2.6 and 8.x-8.0.0.2 - Authenticated Cross-Site Scripting via Workspace Query
Aug 17, 2012
EPSS 0.01
CVE-2012-2169
IBM Rational ClearQuest 7.1.x - Authenticated Stored Cross-Site Scripting via File Description Field
Aug 17, 2012
EPSS 0.01
CVE-2012-2168
IBM Rational ClearQuest 7.1.x-7.1.2.6 & 8.x-8.0.0.2 - Sensitive Info Exposure via Invalid Parameter
Aug 17, 2012
EPSS 0.01
CVE-2012-2165
IBM Rational ClearQuest 7.1.x < 7.1.2.7 and 8.x < 8.0.0.3 - Authenticated Password Hash Exposure via User Query
Aug 17, 2012
EPSS 0.01
CVE-2012-2164
IBM Rational ClearQuest 7.1.x-7.1.2.6 and 8.x-8.0.0.2 - Authenticated Access Control Bypass via Parameter Tampering
Aug 17, 2012
EPSS 0.01
CVE-2012-0744
IBM Rational ClearQuest <7.1.2.7 & 8.0.0.3 - Info Disclosure
Aug 17, 2012
EPSS 0.08
CVE-2012-3308
IBM Sametime 8.0.2-8.5.2.1 - Cross-Site Scripting via IM Chat
Aug 17, 2012
EPSS 0.02
CVE-2012-3294
IBM WebSphere MQ File Transfer Edition < 7.0.4 and WebSphere MQ Managed File Transfer 7.5 - Cross-Site Request Forgery
Aug 17, 2012
EPSS 0.01
CVE-2012-2206
IBM WebSphere MQ File Transfer Edition <= 7.0.4 - Authenticated Arbitrary File Read via Web Gateway URI
Aug 17, 2012
EPSS 0.02
CVE-2012-2203
IBM Global Security Kit < 8.0.14.22 - SSL Server Spoofing via PKCS #12 Certificate Injection
Aug 08, 2012
EPSS 0.02
CVE-2012-2191
IBM Global Security Kit < 8.0.14.22 - Denial of Service via TLS Record Layer Crafted Values
Aug 08, 2012
EPSS 0.04
CVE-2012-2188
IBM Power HMC & SDMC Firmware Privilege Escalation via VIOS viosrvcmd
Aug 06, 2012
EPSS 0.00
CVE-2012-2163
IBM Scale Out Network Attached Storage 1.1-1.3.1 - Remote Code Execution
Jul 30, 2012
EPSS 0.02
CVE-2012-0723
IBM VIOS 2.2.1.4-FP-25 SP-02 and AIX 5.3, 6.1, 7.1 - Denial of Service via dupmsg System Call
Jul 30, 2012
EPSS 0.00
CVE-2012-2202
IBM Lotus Protector for Mail Security 2.1/2.5/2.5.1/2.8 - Authenticated Path Traversal
Jul 27, 2012
EPSS 0.03
CVE-2012-2197
IBM DB2 - Stack-based Buffer Overflow in Java Stored Procedure Infrastructure
Jul 25, 2012
EPSS 0.04
CVE-2012-2196
IBM DB2 9.1-10.1 - Unauthenticated Arbitrary XML File Read via GET_WRAP_CFG_C Stored Procedure
Jul 25, 2012
EPSS 0.02
CVE-2012-2194
IBM DB2 9.1-10.1 - Path Traversal via SQLJ.DB2_INSTALL_JAR Stored Procedure
Jul 25, 2012
EPSS 0.03
CVE-2012-2955
IBM Lotus Protector for Mail Security 2.1-2.8 XSS via Query String
Jul 20, 2012
EPSS 0.02
CVE-2012-2181
IBM WebSphere Portal 7.0.0.1-7.0.0.2 and 8.0 - Path Traversal via Dojo Module
Jul 03, 2012
EPSS 0.03
CVE-2012-2200
IBM VIOS 2.2.1.4-FP-25 SP-02 and AIX 6.1, 7.1 - Privilege Escalation via Sendmail .forward File
Jun 27, 2012
EPSS 0.00
CVE-2012-2179
IBM AIX 5.3, 6.1, 7.1 - Arbitrary File Write via Symlink Attack on Temporary File
Jun 22, 2012
EPSS 0.02
CVE-2012-2172
IBM DS Storage Manager Host Software < 10.83 - Cross-Site Scripting via SoftwareRegistration.do updateRegn Parameter
Jun 22, 2012
EPSS 0.02
CVE-2012-2171
IBM DS Storage Manager < 10.83 Authenticated SQL Injection
Jun 22, 2012
EPSS 0.05
Products
websphere_application_server 465 aix 400 db2 341 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV