ibm

8,286 tracked vulnerabilities.

CVE-2024-37533 LOW
IBM InfoSphere Information Server 11.7 - Info Disclosure
Jul 24, 2024
CVSS 2.4
EPSS 0.00
CVE-2024-28796 MEDIUM
IBM Rational ClearQuest 9.1-9.1.0.6 - Stored Cross-Site Scripting in Web UI
Jul 17, 2024
CVSS 6.4
EPSS 0.00
CVE-2024-39741 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Path Traversal via URL Request
Jul 15, 2024
CVSS 4.3
EPSS 0.01
CVE-2024-39740 MEDIUM
IBM Datacap Navigator <9.1.10 - Info Disclosure
Jul 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-39735 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Authenticated Stored Cross-Site Scripting
Jul 15, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-39729 MEDIUM
IBM Datacap Navigator <9.1.10 - Info Disclosure
Jul 15, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-39739 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Authenticated Server-Side Request Forgery
Jul 15, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-39737 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Sensitive Information Exposure via Error Message
Jul 15, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-39736 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - HTTP Header Injection via HOST Header
Jul 15, 2024
CVSS 6.5
EPSS 0.00
CVE-2024-39731 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Use of a Broken or Risky Cryptographic Algorithm
Jul 15, 2024
CVSS 5.9
EPSS 0.00
CVE-2024-39728 MEDIUM
IBM Datacap Navigator 9.1.5-9.1.9 - Stored Cross-Site Scripting
Jul 15, 2024
CVSS 6.4
EPSS 0.00
CVE-2024-39734 MEDIUM
IBM Datacap Navigator <9.1.10 - Open Redirect
Jul 14, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-39733 MEDIUM
IBM Datacap Navigator <9.1.10 - Info Disclosure
Jul 14, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-39732 MEDIUM
IBM Datacap Navigator <9.1.10 - Info Disclosure
Jul 14, 2024
CVSS 4.1
EPSS 0.00
CVE-2024-40690 MEDIUM
IBM InfoSphere Information Server 11.7 - Authenticated Stored Cross-Site Scripting
Jul 12, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-25023 MEDIUM
IBM Cloud Pak for Security 1.10.0.0-1.10.11.0 & QRadar Suite 1.10.12.0-1.10.22.0 Cleartext Sensitive Info in Logs
Jul 10, 2024
CVSS 5.5
EPSS 0.00
CVE-2024-35154 HIGH
IBM WebSphere Application Server <9.0 - Authenticated RCE
Jul 09, 2024
CVSS 7.2
EPSS 0.01
CVE-2024-39743 MEDIUM
IBM MQ Operator 2.0.0-2.0.23 and 3.2.2 - Denial of Service via Memory De-allocation
Jul 08, 2024
CVSS 5.9
EPSS 0.01
CVE-2024-39742 HIGH
IBM MQ Operator 2.0.0-2.0.23 and 3.2.2 - Authentication Bypass via Partial String Comparison
Jul 08, 2024
CVSS 8.1
EPSS 0.01
CVE-2024-37528 MEDIUM
IBM Cloud Pak for Business Automation 18.0.0-23.0.2 - Cross-Site Scripting
Jul 08, 2024
CVSS 4.8
EPSS 0.00
CVE-2024-31897 MEDIUM
IBM Cloud Pak for Business Automation <23.0.2 - SSRF
Jul 08, 2024
CVSS 4.3
EPSS 0.00
CVE-2024-38330 HIGH
IBM System Management for i <7.4 - Privilege Escalation
Jul 08, 2024
CVSS 7.0
EPSS 0.00
CVE-2024-39723 MEDIUM
IBM FlashSystem 5300 - Physical Access
Jul 08, 2024
CVSS 4.6
EPSS 0.00
CVE-2024-28794 MEDIUM
IBM InfoSphere Information Server 11.7 - Cross-Site Scripting
Jun 30, 2024
CVSS 5.4
EPSS 0.00
CVE-2024-31898 MEDIUM
IBM InfoSphere Information Server 11.7 - Auth Bypass
Jun 30, 2024
CVSS 5.4
EPSS 0.00
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 65
Quick Filters
Critical CVEs With Exploits In CISA KEV