ibm

8,202 tracked vulnerabilities.

CVE-2021-20468 MEDIUM
IBM Cognos Analytics <11.2.1 - CSRF
Sep 01, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-29864 MEDIUM
IBM Security Identity Manager 6.0 and 6.0.2 - Open Redirect
Aug 30, 2022
CVSS 6.1
EPSS 0.00
CVE-2021-38934 MEDIUM
IBM Engineering Test Management <7.0.2 - XSS
Aug 29, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-3669 MEDIUM
Linux Kernel - Denial of Service via Shared Memory Segment Count Exhaustion
Aug 26, 2022
CVSS 5.5
EPSS 0.00
CVE-2021-29891 MEDIUM
IBM Power System AC922 & HMC 7063-CR2 Firmware - Unrestricted Dangerous File Upload via Site Identity Certificate
Aug 22, 2022
CVSS 4.9
EPSS 0.00
CVE-2021-39087 MEDIUM
IBM Sterling B2b Integrator < 6.0.3.6 - Incorrect Default Permissions
Aug 16, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-39086 MEDIUM
IBM Sterling File Gateway 6.0.0.0-6.0.3.5, 6.1.0.0-6.1.0.4, 6.1.1.0-6.1.1.1 - Information Disclosure via Error Message
Aug 16, 2022
CVSS 5.3
EPSS 0.00
CVE-2021-39085 CRITICAL
IBM Sterling B2B Integrator 6.0.0.0-6.0.3.5, 6.1.0.0-6.1.0.4, 6.1.1.0-6.1.1.1 - SQL Injection
Aug 16, 2022
CVSS 9.8
EPSS 0.00
CVE-2021-39035 MEDIUM
IBM Sterling B2B Integrator 6.0.0.0-6.0.3.5, 6.1.0.0-6.1.0.4, 6.1.1.0-6.1.1.1 - Cross-Site Scripting
Aug 16, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-39088 HIGH
IBM QRadar SIEM 7.3-7.5 - Local Privilege Escalation
Jul 28, 2022
CVSS 7.8
EPSS 0.00
CVE-2021-38936 MEDIUM
IBM QRadar SIEM <7.5 - Info Disclosure
Jul 20, 2022
CVSS 4.9
EPSS 0.00
CVE-2021-29755 HIGH
IBM QRadar SIEM 7.3-7.5 - Improper Certificate Validation
Jul 20, 2022
CVSS 7.5
EPSS 0.00
CVE-2021-38868 MEDIUM
IBM Engineering Requirements Quality Assistant - CSRF
Jul 18, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-29799 MEDIUM
IBM Engineering Requirements Quality Assistant - Info Disclosure
Jul 18, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-29790 MEDIUM
IBM Engineering Requirements Quality Assistant On-Premises - Stored Cross-Site Scripting
Jul 18, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-29788 MEDIUM
IBM Engineering Requirements Quality Assistant On-Premises - Stored Cross-Site Scripting
Jul 18, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-39028 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing HTTP Header Injection via HOST Header
Jul 14, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-39019 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 - Sensitive Information Exposure
Jul 14, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-39018 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing 6.0.6, 6.0.6.1, 7.0, 7.0.1, 7.0.2 - Sensitive Information Disclosure
Jul 14, 2022
CVSS 4.3
EPSS 0.00
CVE-2021-39017 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing <7.0.2 - RCE
Jul 14, 2022
CVSS 6.5
EPSS 0.00
CVE-2021-39016 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing <7.0.2 - DoS
Jul 14, 2022
CVSS 4.3
EPSS 0.00
CVE-2021-39015 MEDIUM
IBM Engineering Lifecycle Optimization - Publishing 7.0, 7.0.1, and 7.0.2 - Cross-Site Scripting
Jul 14, 2022
CVSS 5.4
EPSS 0.00
CVE-2021-39041 MEDIUM
IBM QRadar SIEM 7.3-7.5 - Partial Denial of Service
Jul 12, 2022
CVSS 5.3
EPSS 0.00
CVE-2021-38954 MEDIUM
IBM Sterling B2B Integrator <6.1.1.0 - Info Disclosure
Jun 30, 2022
CVSS 4.3
EPSS 0.00
CVE-2021-38941 HIGH
IBM CloudPak for Multicloud Monitoring <2.4 - Info Disclosure
Jun 30, 2022
CVSS 8.1
EPSS 0.00
Products
websphere_application_server 445 aix 393 db2 328 rational_quality_manager 202 sterling_b2b_integrator 195 infosphere_information_server 188 qradar_security_information_and_event_manager 187 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 102 sterling_file_gateway 93 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 vios 85 rational_software_architect_design_manager 81 api_connect 79 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 63
Quick Filters
Critical CVEs With Exploits In CISA KEV