ibm

8,202 tracked vulnerabilities.

CVE-2021-38926 MEDIUM
IBM Db2 9.7, 10.1, 10.5, 11.1, 11.5 - Privilege Escalation via Task Column Modification
Dec 09, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-29678 HIGH
IBM Db2 9.7, 10.1, 10.5, 11.1, 11.5 - Incorrect Authorization
Dec 09, 2021
CVSS 8.7
EPSS 0.00
CVE-2021-20373 HIGH
IBM Db2 9.7, 10.1, 10.5, 11.1, 11.5 - Information Disclosure via LOAD Utility
Dec 09, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-38909 MEDIUM
IBM Cognos Analytics <11.1.7,11.2.0 - XSS
Dec 03, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-29867 MEDIUM
IBM Cognos Analytics <11.2.0 - Info Disclosure
Dec 03, 2021
CVSS 5.4
EPSS 0.00
CVE-2021-29756 HIGH
IBM Cognos Analytics 11.1.7 and 11.2.0 - Cross-Site Request Forgery in My Inbox Page
Dec 03, 2021
CVSS 8.8
EPSS 0.00
CVE-2021-29719 MEDIUM
IBM Cognos Analytics 11.1.0-11.1.7 - Client-Side Vulnerability via Incorrect Content Type
Dec 03, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-29716 MEDIUM
IBM Cognos Analytics <11.2.0 - Info Disclosure
Dec 03, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-20493 MEDIUM
IBM Cognos Analytics <11.1.7,11.2.0 - XSS
Dec 03, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-20470 HIGH
IBM Cognos Analytics <11.2.0 - Info Disclosure
Dec 03, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-29863 MEDIUM
IBM QRadar SIEM 7.3-7.4 - Authenticated Server-Side Request Forgery
Dec 01, 2021
CVSS 4.3
EPSS 0.00
CVE-2021-29849 MEDIUM
IBM QRadar SIEM 7.3-7.4 - Stored Cross-Site Scripting
Dec 01, 2021
CVSS 6.1
EPSS 0.00
CVE-2021-29779 MEDIUM
IBM QRadar SIEM <7.5 - Info Disclosure
Dec 01, 2021
CVSS 5.9
EPSS 0.00
CVE-2021-20400 HIGH
IBM QRadar SIEM <7.4 - Info Disclosure
Dec 01, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-39000 MEDIUM
IBM MQ Appliance <9.2 - Info Disclosure
Nov 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-38999 MEDIUM
IBM MQ Appliance - Exposure of Sensitive Information via Trace Data
Nov 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-38967 MEDIUM
IBM MQ Appliance <9.2 - Code Injection
Nov 30, 2021
CVSS 6.7
EPSS 0.00
CVE-2021-38958 MEDIUM
IBM MQ Appliance 9.2 CD and 9.2 LTS - Denial of Service via Concurrency Issue
Nov 30, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-38873 HIGH
IBM Planning Analytics 2.0 - Code Injection
Nov 24, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-38980 MEDIUM
IBM Tivoli Key Lifecycle Manager <4.1 - Info Disclosure
Nov 23, 2021
CVSS 5.3
EPSS 0.00
CVE-2021-38891 HIGH
IBM Sterling Connect:Direct Web Services <6.0 - Info Disclosure
Nov 23, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-38890 HIGH
IBM Sterling Connect:Direct Web Services - Info Disclosure
Nov 23, 2021
CVSS 7.5
EPSS 0.00
CVE-2021-38875 MEDIUM
IBM MQ 8.0, 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.1 CD, and 9.2 CD - Denial of Service via Message Processing Error
Nov 23, 2021
CVSS 6.5
EPSS 0.00
CVE-2021-38959 MEDIUM
IBM SPSS Statistics 24.0-28.0 - Denial of Service via Arbitrary File Write
Nov 17, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-29861 MEDIUM
IBM AIX 7.1, 7.2 and VIOS 3.1 - Unauthenticated Sensitive Information Exposure via EFS
Nov 17, 2021
CVSS 6.2
EPSS 0.00
Products
websphere_application_server 445 aix 393 db2 328 rational_quality_manager 202 sterling_b2b_integrator 195 infosphere_information_server 188 qradar_security_information_and_event_manager 187 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 102 sterling_file_gateway 93 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 vios 85 rational_software_architect_design_manager 81 api_connect 79 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 63
Quick Filters
Critical CVEs With Exploits In CISA KEV