Vendor CVEs

IBM

All CVEs

8,259 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2019-4410	IBM Business Automation Workflow	Med	0.35	5.4	0.01	Jul 1, 2019	IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4337	IBM Robotic Process Automation with Automation Anywhere	Med	0.35	5.3	0.01	Jul 1, 2019	IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes. IBM X-Force ID: 161412.
CVE-2019-4297	IBM Robotic Process Automation with Automation Anywhere	Med	0.35	5.4	0.01	Jul 1, 2019	IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM…
CVE-2019-4237	IBM Infosphere Information Server	Med	0.35	5.4	0.01	Jul 1, 2019	A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
CVE-2019-4250	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading…
CVE-2019-4249	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4083	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading…
CVE-2018-1893	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1892	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1828	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1827	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1826	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1760	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1758	IBM Rational Collaborative Lifecycle Management	Med	0.35	5.4	0.01	Jun 27, 2019	IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4382	IBM API Connect	Med	0.35	5.3	0.08	Jun 25, 2019	IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.
CVE-2019-4158	IBM Security Access Manager for Web	Med	0.35	5.4	0.01	Jun 25, 2019	IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574.
CVE-2018-2013	IBM API Connect	Med	0.35	5.3	0.02	Jun 25, 2019	IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.
CVE-2018-2011	IBM API Connect	Med	0.35	5.3	0.03	Jun 25, 2019	IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.
CVE-2019-4303	IBM Maximo Asset Management	Med	0.35	5.4	0.01	Jun 19, 2019	IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4176	IBM Cognos Controller	Med	0.35	5.3	0.02	Jun 17, 2019	IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881.
CVE-2019-4136	IBM Cognos Controller	Med	0.35	5.4	0.01	Jun 17, 2019	IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4403	IBM Connections	Med	0.35	5.4	0.01	Jun 14, 2019	IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162264.
CVE-2019-4070	IBM Intelligent Operations Center	Med	0.35	5.4	0.01	Jun 7, 2019	IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
CVE-2019-4219	IBM Security Information Queue (ISIQ)	Med	0.35	5.3	0.01	Jun 6, 2019	IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 159228.
CVE-2019-4184	IBM Jazz Reporting Service	Med	0.35	5.4	0.01	May 29, 2019	IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2019-4139	IBM Cognos Analytics	Med	0.35	5.4	0.01	May 29, 2019	IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2019-4293	IBM Storwize Unified V7000	Med	0.35	5.3	0.02	May 20, 2019	IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.
CVE-2019-4011	IBM Bigfix Platform	Med	0.35	5.4	0.01	May 20, 2019	IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4119	IBM Cloud Private Kubernetes API server	Med	0.35	5.3	0.01	May 17, 2019	IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.
CVE-2018-1975	IBM Rational Doors Web Access	Med	0.35	5.4	0.01	May 16, 2019	IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4204	IBM Business Automation Workflow	Med	0.35	5.4	0.01	May 10, 2019	IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2018-1990	IBM Cloud App Management	Med	0.35	5.3	0.02	May 10, 2019	IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283.
CVE-2019-4258	IBM Sterling B2b Integrator	Med	0.35	5.4	0.01	May 1, 2019	IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2018-1933	IBM IBM Planning Analytics	Med	0.35	5.4	0.01	May 1, 2019	IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2018-2004	IBM Jazz Reporting Service	Med	0.35	5.4	0.01	Apr 29, 2019	IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2018-1961	IBM Emptoris Contract Management	Med	0.35	5.3	0.01	Apr 29, 2019	IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657.
CVE-2019-4238	IBM Infosphere Information Server	Med	0.35	5.4	0.01	Apr 25, 2019	IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4148	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4077	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4076	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4075	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4074	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4073	IBM Sterling B2B Integrator Standard Edition	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4033	IBM Content Navigator	Med	0.35	5.4	0.01	Apr 25, 2019	IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2018-1729	IBM QRadar SIEM	Med	0.35	5.3	0.02	Apr 19, 2019	IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147708.
CVE-2019-4051	IBM API Connect	Med	0.35	5.3	0.02	Apr 8, 2019	Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID:…
CVE-2018-1943	IBM Cloud Private	Med	0.35	5.4	0.01	Apr 8, 2019	IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will…
CVE-2018-1885	IBM Business Automation Workflow	Med	0.35	5.3	0.02	Apr 8, 2019	IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVE-2018-1913	IBM DNG/RRC	Med	0.35	5.4	0.01	Apr 3, 2019	IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4035	IBM Content Navigator	Med	0.35	5.4	0.01	Mar 22, 2019	IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the…

CVE-2019-4410MedJul 1, 2019
IBM
Business Automation Workflow
risk 0.35cvss 5.4epss 0.01
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4337MedJul 1, 2019
IBM
Robotic Process Automation with Automation Anywhere
risk 0.35cvss 5.3epss 0.01
IBM Robotic Process Automation with Automation Anywhere 11 could allow an attacker to obtain sensitive information due to missing authentication in Ignite nodes. IBM X-Force ID: 161412.
CVE-2019-4297MedJul 1, 2019
IBM
Robotic Process Automation with Automation Anywhere
risk 0.35cvss 5.4epss 0.01
IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM…
CVE-2019-4237MedJul 1, 2019
IBM
Infosphere Information Server
risk 0.35cvss 5.4epss 0.01
A Cross-Frame Scripting vulnerability in IBM InfoSphere Information Server 11.3, 11.5, and 11.7 can allow an attacker to load the vulnerable application inside an HTML iframe tag on a malicious page. IBM X-Force ID: 159419.
CVE-2019-4250MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading…
CVE-2019-4249MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4083MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Jazz Foundation products (IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading…
CVE-2018-1893MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1892MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1828MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1827MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1826MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1760MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2018-1758MedJun 27, 2019
IBM
Rational Collaborative Lifecycle Management
risk 0.35cvss 5.4epss 0.01
IBM Rational Collaborative Lifecycle Management 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2019-4382MedJun 25, 2019
IBM
API Connect
risk 0.35cvss 5.3epss 0.08
IBM API Connect 5.0.0.0 through 5.0.8.6 could allow an unauthorized user to obtain sensitive information about the system users using specially crafted HTTP requests. IBM X-Force ID: 162162.
CVE-2019-4158MedJun 25, 2019
IBM
Security Access Manager for Web
risk 0.35cvss 5.4epss 0.01
IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574.
CVE-2018-2013MedJun 25, 2019
IBM
API Connect
risk 0.35cvss 5.3epss 0.02
IBM API Connect 2018.1 through 2018.4.1.5 could disclose sensitive information to an unauthorized user that could aid in further attacks against the system. IBM X-Force ID: 155193.
CVE-2018-2011MedJun 25, 2019
IBM
API Connect
risk 0.35cvss 5.3epss 0.03
IBM API Connect 2018.1 through 2018.4.1.5 could allow an attacker to obtain sensitive information from a specially crafted HTTP request that could aid an attacker in further attacks against the system. IBM X-Force ID: 155150.
CVE-2019-4303MedJun 19, 2019
IBM
Maximo Asset Management
risk 0.35cvss 5.4epss 0.01
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4176MedJun 17, 2019
IBM
Cognos Controller
risk 0.35cvss 5.3epss 0.02
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 could allow a remote attacker to bypass security restrictions, caused by an error related to insecure HTTP Methods. An attacker could exploit this vulnerability to gain access to the system. IBM X-Force ID: 158881.
CVE-2019-4136MedJun 17, 2019
IBM
Cognos Controller
risk 0.35cvss 5.4epss 0.01
IBM Cognos Controller 10.2.0, 10.2.1, 10.3.0, 10.3.1, and 10.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4403MedJun 14, 2019
IBM
Connections
risk 0.35cvss 5.4epss 0.01
IBM Connections 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162264.
CVE-2019-4070MedJun 7, 2019
IBM
Intelligent Operations Center
risk 0.35cvss 5.4epss 0.01
IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
CVE-2019-4219MedJun 6, 2019
IBM
Security Information Queue (ISIQ)
risk 0.35cvss 5.3epss 0.01
IBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 generates an error message that includes sensitive information that could be used in further attacks against the system. IBM X-Force ID: 159228.
CVE-2019-4184MedMay 29, 2019
IBM
Jazz Reporting Service
risk 0.35cvss 5.4epss 0.01
IBM Jazz Reporting Service 6.0 through 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2019-4139MedMay 29, 2019
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0, 11.1.0, and 11.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2019-4293MedMay 20, 2019
IBM
Storwize Unified V7000
risk 0.35cvss 5.3epss 0.02
IBM Storwize V7000 Unified (2073) 1.6 configuration may allow an attacker to reveal the server version in default installation, which could be used in further attacks against the system. IBM X-Force ID: 160699.
CVE-2019-4011MedMay 20, 2019
IBM
Bigfix Platform
risk 0.35cvss 5.4epss 0.01
IBM BigFix Platform 9.2 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force…
CVE-2019-4119MedMay 17, 2019
IBM
Cloud Private Kubernetes API server
risk 0.35cvss 5.3epss 0.01
IBM Cloud Private Kubernetes API server 2.1.0, 3.1.0, 3.1.1, and 3.1.2 can be used as an HTTP proxy to not only cluster internal but also external target IP addresses. IBM X-Force ID: 158145.
CVE-2018-1975MedMay 16, 2019
IBM
Rational Doors Web Access
risk 0.35cvss 5.4epss 0.01
IBM Rational DOORS Web Access 9.5.1 through 9.5.2.9, and 9.6 through 9.6.1.9 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4204MedMay 10, 2019
IBM
Business Automation Workflow
risk 0.35cvss 5.4epss 0.01
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, and 19.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2018-1990MedMay 10, 2019
IBM
Cloud App Management
risk 0.35cvss 5.3epss 0.02
IBM Cloud App Management V2018.2.0, V2018.4.0, and V2018.4.1 could allow an attacker to obtain sensitive configuration information using a specially crafted HTTP request. IBM X-Force ID: 154283.
CVE-2019-4258MedMay 1, 2019
IBM
Sterling B2b Integrator
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 Standard Edition is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2018-1933MedMay 1, 2019
IBM
IBM Planning Analytics
risk 0.35cvss 5.4epss 0.01
IBM Planning Analytics 2.0 through 2.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2018-2004MedApr 29, 2019
IBM
Jazz Reporting Service
risk 0.35cvss 5.4epss 0.01
IBM Jazz Reporting Service (JRS) 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2018-1961MedApr 29, 2019
IBM
Emptoris Contract Management
risk 0.35cvss 5.3epss 0.01
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657.
CVE-2019-4238MedApr 25, 2019
IBM
Infosphere Information Server
risk 0.35cvss 5.4epss 0.01
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2019-4148MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4077MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4076MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4075MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4074MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4073MedApr 25, 2019
IBM
Sterling B2B Integrator Standard Edition
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 and 6.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2019-4033MedApr 25, 2019
IBM
Content Navigator
risk 0.35cvss 5.4epss 0.01
IBM Content Navigator 2.0.3 and 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2018-1729MedApr 19, 2019
IBM
QRadar SIEM
risk 0.35cvss 5.3epss 0.02
IBM QRadar SIEM 7.3 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 147708.
CVE-2019-4051MedApr 8, 2019
IBM
API Connect
risk 0.35cvss 5.3epss 0.02
Some URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paths, network interface names along with their mac addresses. An attacker can use this information in targeted attacks. IBM X-Force ID:…
CVE-2018-1943MedApr 8, 2019
IBM
Cloud Private
risk 0.35cvss 5.4epss 0.01
IBM Cloud Private 3.1.0 and 3.1.1 is vulnerable to HTTP HOST header injection, caused by improper validation of input. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to inject arbitrary HTTP headers, which will…
CVE-2018-1885MedApr 8, 2019
IBM
Business Automation Workflow
risk 0.35cvss 5.3epss 0.02
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow an unauthenticated attacker to obtain sensitve information using a specially cracted HTTP request. IBM X-Force ID: 152020.
CVE-2018-1913MedApr 3, 2019
IBM
DNG/RRC
risk 0.35cvss 5.4epss 0.01
IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.3 and 6.0 through 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2019-4035MedMar 22, 2019
IBM
Content Navigator
risk 0.35cvss 5.4epss 0.01
IBM Content Navigator 3.0CD could allow attackers to direct web traffic to a malicious site. If attackers make a fake IBM Content Navigator site, they can send a link to ICN users to send request to their Edit client directly. Then Edit client will download documents from the…

Page 69 of 166