VYPR
← IBM

Vendor CVEs

IBM

All CVEs

8,825 total · sorted by risk
  • CVE-2013-5455Dec 7, 2013
    IBM
    Smartcloud Provisioning
    risk 0.00cvss —epss 0.01

    IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command.

  • CVE-2013-5449Dec 4, 2013
    IBM
    Filenet Content Manager
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via…

  • CVE-2013-6718Dec 1, 2013
    IBM
    Advanced Management Module
    risk 0.00cvss —epss 0.01

    The Advanced Management Module (AMM) with firmware 3.64B, 3.64C, and 3.64G for IBM BladeCenter systems allows remote attackers to discover account names and passwords via use of an unspecified interface.

  • CVE-2013-6307Nov 29, 2013
    IBM
    QRadar SIEM
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-5463Nov 29, 2013
    IBM
    QRadar SIEM
    risk 0.00cvss —epss 0.01

    The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injecting a (1) DLL or (2) configuration file.

  • CVE-2013-5448Nov 29, 2013
    IBM
    QRadar SIEM
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-6322Nov 28, 2013
    IBM
    Sterling Selling and Fulfillment Suite
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-4036Nov 27, 2013
    IBM
    Infosphere Master Data Management Server For Product Information Management
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote…

  • CVE-2013-5458Nov 24, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2013-5457Nov 24, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.06

    Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.

  • CVE-2013-5456Nov 24, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.06

    The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.

  • CVE-2013-5375Nov 24, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.

  • CVE-2013-4041Nov 24, 2013
    IBM
    Java
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.

  • CVE-2013-6312Nov 22, 2013
    IBM
    Rational Performance Tester
    risk 0.00cvss —epss 0.01

    Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via unknown vectors.

  • CVE-2013-5418Nov 18, 2013
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2013-5417Nov 18, 2013
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via HTTP response data.

  • CVE-2013-5414Nov 18, 2013
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    The migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain…

  • CVE-2013-4006Nov 18, 2013
    IBM
    Websphere Application Server
    risk 0.00cvss —epss 0.01

    IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.

  • CVE-2013-5454Nov 18, 2013
    IBM
    Websphere Portal
    risk 0.00cvss —epss 0.02

    IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.

  • CVE-2013-5425Nov 18, 2013
    IBM
    Websphere Virtual Enterprise
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

  • CVE-2013-3030Nov 18, 2013
    IBM
    Cognos Business Intelligence
    risk 0.00cvss —epss 0.02

    The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers to cause a denial of service (temporary gateway outage) via crafted HTTP requests.

  • CVE-2013-5453Nov 13, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.

  • CVE-2013-5450Nov 13, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.

  • CVE-2013-5442Nov 13, 2013
    IBM
    Security Network Protection Firmware
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified…

  • CVE-2013-5379Nov 13, 2013
    IBM
    Websphere Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.

  • CVE-2013-5378Nov 13, 2013
    IBM
    Websphere Portal
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.

  • CVE-2013-3985Nov 9, 2013
    IBM
    Sametime
    risk 0.00cvss —epss 0.01

    The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.

  • CVE-2013-3045Nov 9, 2013
    IBM
    Sametime
    risk 0.00cvss —epss 0.01

    The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function.

  • CVE-2013-3044Nov 9, 2013
    IBM
    Sametime
    risk 0.00cvss —epss 0.01

    The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of chat messages, or compose anonymous chat messages, by leveraging meeting-attendance privileges.

  • CVE-2013-0537Nov 9, 2013
    IBM
    Sametime
    risk 0.00cvss —epss 0.01

    The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges.

  • CVE-2013-4055Nov 8, 2013
    IBM
    Domino Web Administrator
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051.

  • CVE-2013-4051Nov 8, 2013
    IBM
    Domino Web Administrator
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055.

  • CVE-2013-4050Nov 8, 2013
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

  • CVE-2013-5387Nov 6, 2013
    IBM
    Platform Symphony
    risk 0.00cvss —epss 0.01

    Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data.

  • CVE-2013-5431Nov 1, 2013
    IBM
    Tivoli Federated Identity Manager
    risk 0.00cvss —epss 0.01

    Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8…

  • CVE-2013-5430Oct 28, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment…

  • CVE-2013-5424Oct 25, 2013
    IBM
    Flex System Manager
    risk 0.00cvss —epss 0.01

    IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.

  • CVE-2013-3989Oct 25, 2013
    IBM
    Security Appscan
    risk 0.00cvss —epss 0.01

    IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.

  • CVE-2013-5389Oct 22, 2013
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.

  • CVE-2013-5388Oct 22, 2013
    IBM
    Lotus Domino
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F.

  • CVE-2013-5446Oct 22, 2013
    IBM
    Websphere Datapower Xc10 Appliance
    risk 0.00cvss —epss 0.02

    The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.

  • CVE-2013-5428Oct 22, 2013
    IBM
    Websphere Datapower Xc10 Appliance
    risk 0.00cvss —epss 0.02

    IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.

  • CVE-2013-5372Oct 19, 2013
    IBM
    Websphere Message Broker
    risk 0.00cvss —epss 0.03

    The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers…

  • CVE-2013-5376Oct 17, 2013
    IBM
    Storwize Unified V7000
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a "cross frame scripting" attack against an administrative user.

  • CVE-2013-3025Oct 17, 2013
    IBM
    Rational Focal Point
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in IBM Rational Focal Point 6.5.x and 6.6.x before 6.6.0.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-0500Oct 17, 2013
    IBM
    Storwize Unified V7000
    risk 0.00cvss —epss 0.01

    IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authenticated users to obtain sensitive information, modify programs or files, or…

  • CVE-2013-5394Oct 16, 2013
    IBM
    Websphere Extreme Scale
    risk 0.00cvss —epss 0.01

    The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.

  • CVE-2013-5393Oct 16, 2013
    IBM
    Websphere Extreme Scale
    risk 0.00cvss —epss 0.01

    The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.

  • CVE-2013-5390Oct 16, 2013
    IBM
    Websphere Extreme Scale
    risk 0.00cvss —epss 0.01

    Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

  • CVE-2013-4804Oct 13, 2013
    IBM
    Business Process Monitor
    risk 0.00cvss —epss 0.03

    Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors.

Page 146 of 177