ibm

8,321 tracked vulnerabilities.

CVE-2012-0192
IBM Lotus Symphony < 3.0.1 - Remote Code Execution via Embedded JPEG or PNG Image
Jan 23, 2012
EPSS 0.05
CVE-2012-0193
IBM WebSphere Application Server DoS via Form Parameter Hash Collisions
Jan 20, 2012
EPSS 0.02
CVE-2012-0190
IBM SPSS Data Collection 5.6/6.0/6.0.1 & Dimensions 5.5 - RCE via ExportHTML.ocx
Jan 18, 2012
EPSS 0.04
CVE-2012-0189
IBM SPSS SamplePower 3.0 - Remote Code Execution via VsVIEW6 ActiveX Control
Jan 18, 2012
EPSS 0.04
CVE-2012-0188
IBM SPSS Data Collection 5.6/6.0/6.0.1 & Dimensions 5.5 - RCE via SetLicenseInfoEx ActiveX
Jan 18, 2012
EPSS 0.04
CVE-2012-0696
IBM Cognos Executive Viewer < 9.5 FP1 - Cross-Site Scripting via ASP.NET Client or CreateControl.js
Jan 13, 2012
EPSS 0.01
CVE-2011-4820 MEDIUM
IBM Rational Asset Manager 7.5 - Auth Bypass
Sep 29, 2022
CVSS 4.3
EPSS 0.01
CVE-2011-4889 CRITICAL
IBM WebSphere Application Server 6.1-6.1.0.43 - Password Update Bypass via Tivoli Directory Server Configuration
Feb 08, 2018
CVSS 9.8
EPSS 0.03
CVE-2011-1381
IBM OpenPages GRC Platform <6.1.0.1 - Auth Bypass
Jun 27, 2014
EPSS 0.01
CVE-2011-1390
IBM Rational ClearQuest <8.0.0.2 - SQL Injection
May 14, 2012
EPSS 0.02
CVE-2011-4819
IBM Maximo Asset Management and Essentials 6.2, 7.1, 7.5 - Cross-Site Scripting via uisesionid Parameter
Mar 13, 2012
EPSS 0.01
CVE-2011-4818
IBM Maximo Asset Management 6.2, 7.1, 7.5 Open Redirect via uisessionid
Mar 13, 2012
EPSS 0.01
CVE-2011-4817
IBM Maximo Asset Management 6.2, 7.1, 7.5 - Authenticated Exposure of Sensitive Information via Help Menu
Mar 13, 2012
EPSS 0.01
CVE-2011-4816
IBM Maximo Asset Management 6.2, 7.1, 7.5 - Authenticated SQL Injection in KPI Component
Mar 13, 2012
EPSS 0.02
CVE-2011-1397
IBM Maximo Asset Management 6.2, 7.1, 7.5 - Cross-Site Request Forgery in Labor Reporting Page
Mar 13, 2012
EPSS 0.01
CVE-2011-1396
IBM Maximo Asset Management and Essentials 6.2, 7.1, 7.5 - Cross-Site Scripting via ReportType Parameter
Mar 13, 2012
EPSS 0.01
CVE-2011-1395
IBM Maximo Asset Management and Essentials 6.2, 7.1, 7.5 - Cross-Site Scripting via imicon.jsp controlid Parameter
Mar 13, 2012
EPSS 0.01
CVE-2011-1394
IBM Maximo Asset Management 6.2, 7.1, 7.5 - Denial of Service via UI Session Exhaustion
Mar 13, 2012
EPSS 0.03
CVE-2011-1385
IBM VIOS 2.1.x-2.2.x and AIX 5.3-7.1 - Denial of Service via ICMP Echo Reply Packet
Mar 02, 2012
EPSS 0.04
CVE-2011-4890
IBM solidDB < 6.5.0.8 and 7.0 - Authenticated Denial of Service via SELECT ROWNUM Subquery
Feb 21, 2012
EPSS 0.02
CVE-2011-1389
IBM Rational License Key Server <8.1.2 - RCE
Jan 19, 2012
EPSS 0.07
CVE-2011-1376
IBM WAS <6.1.0.43, <7.0.0.21, <8.0.0.2 - Local Info Disclosure
Jan 19, 2012
EPSS 0.00
CVE-2011-5066
IBM WebSphere Application Server 6.1 - Sensitive Information Exposure via SibRaRecoverableSiXaResource FFDC Log
Jan 15, 2012
EPSS 0.00
CVE-2011-5065
IBM WebSphere Application Server 6.1 - Cross-Site Scripting via Web Messaging
Jan 15, 2012
EPSS 0.02
CVE-2011-1377
IBM WebSphere App Server <6.1.0.41 - Info Disclosure
Jan 15, 2012
EPSS 0.02
Products
websphere_application_server 465 aix 400 db2 341 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 i 65 smartcloud_control_desk 65
Quick Filters
Critical CVEs With Exploits In CISA KEV