Vendor CVEs

IBM

All CVEs

8,264 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-4672	IBM QRadar Advisor	Med	0.35	5.3	0.01	Feb 25, 2020	IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438.
CVE-2019-4429	IBM Maximo Asset Management	Med	0.35	5.4	0.01	Feb 19, 2020	IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2012-0718	IBM Tivoli Endpoint Manager	Med	0.35	5.4	0.01	Feb 18, 2020	IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
CVE-2019-4741	IBM Content Navigator	Med	0.35	5.3	0.01	Feb 12, 2020	IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.
CVE-2019-4431	IBM Rational Publishing Engine	Med	0.35	5.4	0.01	Feb 12, 2020	IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4562	IBM Security Directory Server	Med	0.35	5.3	0.01	Feb 4, 2020	IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623.
CVE-2019-4551	IBM Security Directory Server	Med	0.35	5.3	0.01	Feb 4, 2020	IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953.
CVE-2019-4550	IBM Security Directory Server	Med	0.35	5.3	0.01	Feb 4, 2020	IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.
CVE-2019-4451	IBM Security Identity Manager	Med	0.35	5.4	0.01	Feb 4, 2020	IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4559	IBM QRadar SIEM	Med	0.35	5.3	0.01	Jan 10, 2020	IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 166355.
CVE-2019-4623	IBM Cognos Analytics	Med	0.35	5.4	0.01	Dec 30, 2019	IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2018-1682	IBM Watson Studio Local	Med	0.35	5.3	0.01	Dec 30, 2019	IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238.
CVE-2019-4555	IBM Cognos Analytics	Med	0.35	5.4	0.01	Dec 20, 2019	IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4426	IBM Case Manager	Med	0.35	5.4	0.01	Dec 13, 2019	The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
CVE-2019-4665	IBM Spectrum Scale	Med	0.35	5.4	0.01	Dec 11, 2019	IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4663	IBM Websphere Application Server	Med	0.35	5.4	0.01	Dec 10, 2019	IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4611	IBM IBM Planning Analytics	Med	0.35	5.4	0.01	Dec 9, 2019	IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4428	IBM Watson Assistant for IBM Cloud Pak for Data	Med	0.35	5.4	0.01	Dec 9, 2019	IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4468	IBM Cloud Pak System	Med	0.35	5.4	0.01	Dec 3, 2019	IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4467	IBM Cloud Pak System	Med	0.35	5.4	0.01	Dec 3, 2019	IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4226	IBM Cloud Pak System	Med	0.35	5.4	0.01	Dec 3, 2019	IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4098	IBM Cloud Pak System	Med	0.35	5.4	0.01	Dec 3, 2019	IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4570	IBM Tivoli Netcool\/impact	Med	0.35	5.3	0.01	Nov 22, 2019	IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720.
CVE-2019-4569	IBM Tivoli Netcool\/impact	Med	0.35	5.4	0.01	Nov 22, 2019	IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4470	IBM QRadar SIEM	Med	0.35	5.4	0.01	Nov 9, 2019	IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4454	IBM QRadar SIEM	Med	0.35	5.4	0.01	Nov 9, 2019	IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4412	IBM Cognos Controller	Med	0.35	5.3	0.01	Nov 9, 2019	IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162659.
CVE-2019-4600	IBM API Connect	Med	0.35	5.3	0.01	Oct 29, 2019	IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
CVE-2019-4311	IBM Security Guardium Big Data Intelligence (SonarG)	Med	0.35	5.3	0.01	Oct 29, 2019	IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161037.
CVE-2019-4461	IBM Cloud Orchestrator	Med	0.35	5.4	0.01	Oct 25, 2019	IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain…
CVE-2019-4396	IBM Cloud Orchestrator	Med	0.35	5.4	0.01	Oct 25, 2019	IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to…
CVE-2019-4486	IBM Maximo Asset Management	Med	0.35	5.4	0.01	Oct 24, 2019	IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4459	IBM Cloud Orchestrator	Med	0.35	5.4	0.01	Oct 24, 2019	IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
CVE-2019-4514	IBM Security Key Lifecycle Manager	Med	0.35	5.3	0.01	Oct 4, 2019	IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165136.
CVE-2019-4441	IBM Websphere Application Server	Med	0.35	5.3	0.02	Oct 3, 2019	IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 163177.
CVE-2019-4549	IBM Security Directory Server	Med	0.35	5.3	0.01	Oct 2, 2019	IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.
CVE-2019-4497	IBM Jazz Reporting Service	Med	0.35	5.4	0.01	Oct 1, 2019	IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4495	IBM Jazz Reporting Service	Med	0.35	5.4	0.01	Oct 1, 2019	IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4494	IBM Jazz Reporting Service	Med	0.35	5.4	0.01	Oct 1, 2019	IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4246	IBM Daeja ViewONE Virtual	Med	0.35	5.3	0.01	Oct 1, 2019	IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521.
CVE-2019-4423	IBM Sterling File Gateway	Med	0.35	5.3	0.03	Sep 30, 2019	IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162769.
CVE-2019-4305	IBM Websphere Application Server	Med	0.35	5.3	0.01	Sep 30, 2019	IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951.
CVE-2019-4280	IBM Sterling File Gateway	Med	0.35	5.3	0.01	Sep 30, 2019	IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503.
CVE-2019-4115	IBM Websphere Extreme Scale	Med	0.35	5.4	0.01	Sep 30, 2019	IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4262	IBM QRadar SIEM	Med	0.35	5.3	0.01	Sep 26, 2019	IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
CVE-2019-4571	IBM Content Navigator	Med	0.35	5.4	0.01	Sep 25, 2019	IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4505	IBM Websphere Application Server	Med	0.35	5.3	0.02	Sep 20, 2019	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.
CVE-2019-4342	IBM Cognos Analytics	Med	0.35	5.4	0.01	Sep 17, 2019	IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4270	IBM Websphere Application Server	Med	0.35	5.4	0.01	Sep 17, 2019	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4268	IBM Websphere Application Server	Med	0.35	5.3	0.03	Sep 17, 2019	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.

CVE-2019-4672MedFeb 25, 2020
IBM
QRadar Advisor
risk 0.35cvss 5.3epss 0.01
IBM QRadar Advisor 1.1 through 2.5 could allow an unauthorized attacker to obtain sensitive information from specially crafted HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 171438.
CVE-2019-4429MedFeb 19, 2020
IBM
Maximo Asset Management
risk 0.35cvss 5.4epss 0.01
IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2012-0718MedFeb 18, 2020
IBM
Tivoli Endpoint Manager
risk 0.35cvss 5.4epss 0.01
IBM Tivoli Endpoint Manager 8 does not set the HttpOnly flag on cookies.
CVE-2019-4741MedFeb 12, 2020
IBM
Content Navigator
risk 0.35cvss 5.3epss 0.01
IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 172815.
CVE-2019-4431MedFeb 12, 2020
IBM
Rational Publishing Engine
risk 0.35cvss 5.4epss 0.01
IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4562MedFeb 4, 2020
IBM
Security Directory Server
risk 0.35cvss 5.3epss 0.01
IBM Security Directory Server 6.4.0 stores sensitive information in URLs. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history. IBM X-Force ID: 166623.
CVE-2019-4551MedFeb 4, 2020
IBM
Security Directory Server
risk 0.35cvss 5.3epss 0.01
IBM Security Directory Server 6.4.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 165953.
CVE-2019-4550MedFeb 4, 2020
IBM
Security Directory Server
risk 0.35cvss 5.3epss 0.01
IBM Security Directory Server 6.4.0 is deployed with active debugging code that can create unintended entry points. IBM X-Force ID: 165952.
CVE-2019-4451MedFeb 4, 2020
IBM
Security Identity Manager
risk 0.35cvss 5.4epss 0.01
IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4559MedJan 10, 2020
IBM
QRadar SIEM
risk 0.35cvss 5.3epss 0.01
IBM QRadar SIEM 7.3.0 through 7.3.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 166355.
CVE-2019-4623MedDec 30, 2019
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2018-1682MedDec 30, 2019
IBM
Watson Studio Local
risk 0.35cvss 5.3epss 0.01
IBM Watson Studio Local 1.2.3 could disclose sensitive information over the network that an attacked could use in further attacks against the system. IBM X-Force ID: 145238.
CVE-2019-4555MedDec 20, 2019
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4426MedDec 13, 2019
IBM
Case Manager
risk 0.35cvss 5.4epss 0.01
The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
CVE-2019-4665MedDec 11, 2019
IBM
Spectrum Scale
risk 0.35cvss 5.4epss 0.01
IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4663MedDec 10, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.4epss 0.01
IBM WebSphere Application Server - Liberty is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4611MedDec 9, 2019
IBM
IBM Planning Analytics
risk 0.35cvss 5.4epss 0.01
IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4428MedDec 9, 2019
IBM
Watson Assistant for IBM Cloud Pak for Data
risk 0.35cvss 5.4epss 0.01
IBM Watson Assistant for IBM Cloud Pak for Data 1.0.0 through 1.3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4468MedDec 3, 2019
IBM
Cloud Pak System
risk 0.35cvss 5.4epss 0.01
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4467MedDec 3, 2019
IBM
Cloud Pak System
risk 0.35cvss 5.4epss 0.01
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4226MedDec 3, 2019
IBM
Cloud Pak System
risk 0.35cvss 5.4epss 0.01
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4098MedDec 3, 2019
IBM
Cloud Pak System
risk 0.35cvss 5.4epss 0.01
IBM Cloud Pak System 2.3 and 2.3.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4570MedNov 22, 2019
IBM
Tivoli Netcool\/impact
risk 0.35cvss 5.3epss 0.01
IBM Tivoli Netcool Impact 7.1.0 through 7.1.0.16 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 166720.
CVE-2019-4569MedNov 22, 2019
IBM
Tivoli Netcool\/impact
risk 0.35cvss 5.4epss 0.01
IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4470MedNov 9, 2019
IBM
QRadar SIEM
risk 0.35cvss 5.4epss 0.01
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4454MedNov 9, 2019
IBM
QRadar SIEM
risk 0.35cvss 5.4epss 0.01
IBM QRadar 7.3.0 to 7.3.2 Patch 4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4412MedNov 9, 2019
IBM
Cognos Controller
risk 0.35cvss 5.3epss 0.01
IBM Cognos Controller stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 162659.
CVE-2019-4600MedOct 29, 2019
IBM
API Connect
risk 0.35cvss 5.3epss 0.01
IBM API Connect version V5.0.0.0 through 5.0.8.7 could reveal sensitive information to an attacker using a specially crafted HTTP request. IBM X-Force ID: 167883.
CVE-2019-4311MedOct 29, 2019
IBM
Security Guardium Big Data Intelligence (SonarG)
risk 0.35cvss 5.3epss 0.01
IBM Security Guardium Big Data Intelligence (SonarG) 4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 161037.
CVE-2019-4461MedOct 25, 2019
IBM
Cloud Orchestrator
risk 0.35cvss 5.4epss 0.01
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP Response Splitting caused by improper caching of content. This would allow the attacker to perform further attacks, such as Web Cache poisoning, cross-site scripting and possibly obtain…
CVE-2019-4396MedOct 25, 2019
IBM
Cloud Orchestrator
risk 0.35cvss 5.4epss 0.01
IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 is vulnerable to HTTP response splitting attacks, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to…
CVE-2019-4486MedOct 24, 2019
IBM
Maximo Asset Management
risk 0.35cvss 5.4epss 0.01
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4459MedOct 24, 2019
IBM
Cloud Orchestrator
risk 0.35cvss 5.4epss 0.01
IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise 2.5 through 2.5.0.9 and 2.4 through 2.4.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially…
CVE-2019-4514MedOct 4, 2019
IBM
Security Key Lifecycle Manager
risk 0.35cvss 5.3epss 0.01
IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0, and 3.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165136.
CVE-2019-4441MedOct 3, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.3epss 0.02
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser. IBM X-Force ID: 163177.
CVE-2019-4549MedOct 2, 2019
IBM
Security Directory Server
risk 0.35cvss 5.3epss 0.01
IBM Security Directory Server 6.4.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 165951.
CVE-2019-4497MedOct 1, 2019
IBM
Jazz Reporting Service
risk 0.35cvss 5.4epss 0.01
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4495MedOct 1, 2019
IBM
Jazz Reporting Service
risk 0.35cvss 5.4epss 0.01
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4494MedOct 1, 2019
IBM
Jazz Reporting Service
risk 0.35cvss 5.4epss 0.01
IBM Jazz Reporting Service (JRS) 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to…
CVE-2019-4246MedOct 1, 2019
IBM
Daeja ViewONE Virtual
risk 0.35cvss 5.3epss 0.01
IBM Daeja ViewONE Virtual 5.0 through 5.0.6 could expose internal parameters to ViewONE clients that could be used in further attacks against the system. IBM X-Force ID: 159521.
CVE-2019-4423MedSep 30, 2019
IBM
Sterling File Gateway
risk 0.35cvss 5.3epss 0.03
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 162769.
CVE-2019-4305MedSep 30, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.3epss 0.01
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie. IBM X-Force ID: 160951.
CVE-2019-4280MedSep 30, 2019
IBM
Sterling File Gateway
risk 0.35cvss 5.3epss 0.01
IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 displays sensitive information in HTTP requests which could be used in further attacks against the system. IBM X-Force ID: 160503.
CVE-2019-4115MedSep 30, 2019
IBM
Websphere Extreme Scale
risk 0.35cvss 5.4epss 0.01
IBM WebSphere eXtreme Scale 8.6 Admin API is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2019-4262MedSep 26, 2019
IBM
QRadar SIEM
risk 0.35cvss 5.3epss 0.01
IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from the QRadar system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 160014.
CVE-2019-4571MedSep 25, 2019
IBM
Content Navigator
risk 0.35cvss 5.4epss 0.01
IBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2019-4505MedSep 20, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.3epss 0.02
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.
CVE-2019-4342MedSep 17, 2019
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4270MedSep 17, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.4epss 0.01
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Admin Console is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4268MedSep 17, 2019
IBM
Websphere Application Server
risk 0.35cvss 5.3epss 0.03
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 160201.

Page 57 of 166