Vendor CVEs

IBM

All CVEs

8,253 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-1234	IBM Qradar Security Information And Event Manager	Med	0.35	5.4	0.01	Jun 27, 2017	IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913.
CVE-2016-6083	IBM Tivoli Monitoring	Med	0.35	5.3	0.01	Jun 27, 2017	IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.
CVE-2017-1348	IBM Sterling B2b Integrator	Med	0.35	5.4	0.01	Jun 23, 2017	IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1132	IBM Sterling B2b Integrator	Med	0.35	5.4	0.01	Jun 23, 2017	IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9983	IBM Sterling B2b Integrator	Med	0.35	5.3	0.01	Jun 22, 2017	IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275.
CVE-2016-9747	IBM RELM	Med	0.35	5.4	0.01	Jun 22, 2017	IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2017-1117	IBM Websphere Mq	Med	0.35	5.3	0.01	Jun 21, 2017	IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155.
CVE-2017-1104	IBM Rational Quality Manager	Med	0.35	5.4	0.01	Jun 13, 2017	IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1102	IBM RQM	Med	0.35	5.4	0.01	Jun 13, 2017	IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1101	IBM RQM	Med	0.35	5.4	0.01	Jun 13, 2017	IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1100	IBM RQM	Med	0.35	5.4	0.01	Jun 13, 2017	IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2016-9973	IBM Jazz Foundation	Med	0.35	5.4	0.01	Jun 13, 2017	IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209.
CVE-2017-1278	IBM RRC	Med	0.35	5.4	0.01	Jun 12, 2017	IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756.
CVE-2017-1276	IBM Rational Requirements Composer	Med	0.35	5.4	0.01	Jun 12, 2017	IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1247	IBM Rational Requirements Composer	Med	0.35	5.4	0.01	Jun 12, 2017	IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1140	IBM Business Process Manager	Med	0.35	5.4	0.01	Jun 8, 2017	IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2016-9736	IBM Websphere Application Server	Med	0.35	5.3	0.02	Jun 8, 2017	IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information.
CVE-2014-4843	IBM Curam Social Program Management	Med	0.35	5.3	0.01	Jun 8, 2017	Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.
CVE-2017-1305	IBM DNG/RRC	Med	0.35	5.4	0.01	Jun 7, 2017	IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9710	IBM Predictive Solutions Foundation	Med	0.35	5.3	0.02	Jun 7, 2017	IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force…
CVE-2016-5959	IBM Security Privileged Identity Manager	Med	0.35	5.3	0.01	Jun 7, 2017	IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
CVE-2017-1292	IBM Maximo Asset Management	Med	0.35	5.3	0.01	May 26, 2017	IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153.
CVE-2017-1291	IBM Maximo Asset Management	Med	0.35	5.4	0.01	May 26, 2017	IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to…
CVE-2017-1320	IBM Tivoli Federated Identity Manager	Med	0.35	5.4	0.01	May 22, 2017	IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1282	IBM Content Navigator	Med	0.35	5.4	0.01	May 22, 2017	IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1159	IBM Business Process Manager	Med	0.35	5.4	0.01	May 22, 2017	IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to…
CVE-2016-6035	IBM Rational Quality Manager	Med	0.35	5.4	0.01	May 10, 2017	IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-5888	IBM Interact	Med	0.35	5.4	0.01	May 10, 2017	IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-3032	IBM Cognos Analytics	Med	0.35	5.4	0.01	May 10, 2017	IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-9980	IBM Curam Social Program Management	Med	0.35	5.4	0.01	Apr 20, 2017	IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9979	IBM Curam Social Program Management	Med	0.35	5.4	0.01	Apr 20, 2017	IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1160	IBM Financial Transaction Manager	Med	0.35	5.4	0.01	Apr 17, 2017	IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2016-3038	IBM Cognos Tm1	Med	0.35	5.4	0.01	Apr 17, 2017	IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-0228	IBM Marketing Platform	Med	0.35	5.4	0.01	Apr 17, 2017	IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. IBM X-Force ID: 110236.
CVE-2016-8927	IBM Tivoli Application Dependency Discovery Manager	Med	0.35	5.4	0.01	Apr 14, 2017	IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2017-1180	IBM TRIRIGA Document Manager	Med	0.35	5.3	0.01	Apr 5, 2017	The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.
CVE-2016-3031	IBM Cognos Analytics	Med	0.35	5.4	0.01	Apr 5, 2017	IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-3015	IBM Cognos Analytics	Med	0.35	5.4	0.01	Apr 5, 2017	IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-8935	IBM Kenexa LMS on Cloud	Med	0.35	5.4	0.01	Mar 31, 2017	IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2016-6036	IBM Rational Quality Manager	Med	0.35	5.4	0.01	Mar 31, 2017	IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-6031	IBM Rational Quality Manager	Med	0.35	5.4	0.01	Mar 31, 2017	IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-6022	IBM RQM	Med	0.35	5.4	0.01	Mar 31, 2017	IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1143	IBM Kenexa Lcms Premier	Med	0.35	5.3	0.01	Mar 27, 2017	IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the…
CVE-2016-9737	IBM TRIRIGA	Med	0.35	5.4	0.01	Mar 27, 2017	IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-6056	IBM Call Center For Commerce	Med	0.35	5.4	0.01	Mar 27, 2017	IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1146	IBM Content Navigator	Med	0.35	5.4	0.01	Mar 20, 2017	IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-9696	IBM Rhapsody DM	Med	0.35	5.4	0.01	Mar 20, 2017	IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960.
CVE-2016-9694	IBM Rhapsody DM	Med	0.35	5.4	0.01	Mar 20, 2017	IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-9006	IBM Urbancode Deploy	Med	0.35	5.4	0.01	Mar 8, 2017	IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference…
CVE-2017-1133	IBM Qradar Security Information And Event Manager	Med	0.35	5.4	0.01	Mar 7, 2017	IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.

CVE-2017-1234MedJun 27, 2017
IBM
Qradar Security Information And Event Manager
risk 0.35cvss 5.4epss 0.01
IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 123913.
CVE-2016-6083MedJun 27, 2017
IBM
Tivoli Monitoring
risk 0.35cvss 5.3epss 0.01
IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information. IBM X-Force ID: 117696.
CVE-2017-1348MedJun 23, 2017
IBM
Sterling B2b Integrator
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1132MedJun 23, 2017
IBM
Sterling B2b Integrator
risk 0.35cvss 5.4epss 0.01
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9983MedJun 22, 2017
IBM
Sterling B2b Integrator
risk 0.35cvss 5.3epss 0.01
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to. IBM X-Force ID: 120275.
CVE-2016-9747MedJun 22, 2017
IBM
RELM
risk 0.35cvss 5.4epss 0.01
IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2017-1117MedJun 21, 2017
IBM
Websphere Mq
risk 0.35cvss 5.3epss 0.01
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled. IBM X-Force ID: 121155.
CVE-2017-1104MedJun 13, 2017
IBM
Rational Quality Manager
risk 0.35cvss 5.4epss 0.01
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1102MedJun 13, 2017
IBM
RQM
risk 0.35cvss 5.4epss 0.01
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1101MedJun 13, 2017
IBM
RQM
risk 0.35cvss 5.4epss 0.01
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1100MedJun 13, 2017
IBM
RQM
risk 0.35cvss 5.4epss 0.01
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2016-9973MedJun 13, 2017
IBM
Jazz Foundation
risk 0.35cvss 5.4epss 0.01
IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 120209.
CVE-2017-1278MedJun 12, 2017
IBM
RRC
risk 0.35cvss 5.4epss 0.01
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM X-Force ID: 124756.
CVE-2017-1276MedJun 12, 2017
IBM
Rational Requirements Composer
risk 0.35cvss 5.4epss 0.01
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1247MedJun 12, 2017
IBM
Rational Requirements Composer
risk 0.35cvss 5.4epss 0.01
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1140MedJun 8, 2017
IBM
Business Process Manager
risk 0.35cvss 5.4epss 0.01
IBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
CVE-2016-9736MedJun 8, 2017
IBM
Websphere Application Server
risk 0.35cvss 5.3epss 0.02
IBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to obtain sensitive information.
CVE-2014-4843MedJun 8, 2017
IBM
Curam Social Program Management
risk 0.35cvss 5.3epss 0.01
Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.5 before 6.0.5.5 iFix5 allows remote attackers to obtain sensitive information about internal caseworker usernames via vectors related to a URL.
CVE-2017-1305MedJun 7, 2017
IBM
DNG/RRC
risk 0.35cvss 5.4epss 0.01
IBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9710MedJun 7, 2017
IBM
Predictive Solutions Foundation
risk 0.35cvss 5.3epss 0.02
IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force…
CVE-2016-5959MedJun 7, 2017
IBM
Security Privileged Identity Manager
risk 0.35cvss 5.3epss 0.01
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
CVE-2017-1292MedMay 26, 2017
IBM
Maximo Asset Management
risk 0.35cvss 5.3epss 0.01
IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacks against the system. IBM X-Force ID: 125153.
CVE-2017-1291MedMay 26, 2017
IBM
Maximo Asset Management
risk 0.35cvss 5.4epss 0.01
IBM Maximo Asset Management 7.5 and 7.6 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to…
CVE-2017-1320MedMay 22, 2017
IBM
Tivoli Federated Identity Manager
risk 0.35cvss 5.4epss 0.01
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1282MedMay 22, 2017
IBM
Content Navigator
risk 0.35cvss 5.4epss 0.01
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1159MedMay 22, 2017
IBM
Business Process Manager
risk 0.35cvss 5.4epss 0.01
IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to…
CVE-2016-6035MedMay 10, 2017
IBM
Rational Quality Manager
risk 0.35cvss 5.4epss 0.01
IBM Rational Quality Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-5888MedMay 10, 2017
IBM
Interact
risk 0.35cvss 5.4epss 0.01
IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-3032MedMay 10, 2017
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-9980MedApr 20, 2017
IBM
Curam Social Program Management
risk 0.35cvss 5.4epss 0.01
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-9979MedApr 20, 2017
IBM
Curam Social Program Management
risk 0.35cvss 5.4epss 0.01
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2017-1160MedApr 17, 2017
IBM
Financial Transaction Manager
risk 0.35cvss 5.4epss 0.01
IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials…
CVE-2016-3038MedApr 17, 2017
IBM
Cognos Tm1
risk 0.35cvss 5.4epss 0.01
IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:…
CVE-2016-0228MedApr 17, 2017
IBM
Marketing Platform
risk 0.35cvss 5.4epss 0.01
IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts. An attacker could exploit this vulnerability to redirect a victim to arbitrary Web sites. IBM X-Force ID: 110236.
CVE-2016-8927MedApr 14, 2017
IBM
Tivoli Application Dependency Discovery Manager
risk 0.35cvss 5.4epss 0.01
IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within…
CVE-2017-1180MedApr 5, 2017
IBM
TRIRIGA Document Manager
risk 0.35cvss 5.3epss 0.01
The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to. IBM Reference #: 2001084.
CVE-2016-3031MedApr 5, 2017
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-3015MedApr 5, 2017
IBM
Cognos Analytics
risk 0.35cvss 5.4epss 0.01
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-8935MedMar 31, 2017
IBM
Kenexa LMS on Cloud
risk 0.35cvss 5.4epss 0.01
IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure…
CVE-2016-6036MedMar 31, 2017
IBM
Rational Quality Manager
risk 0.35cvss 5.4epss 0.01
IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-6031MedMar 31, 2017
IBM
Rational Quality Manager
risk 0.35cvss 5.4epss 0.01
IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted…
CVE-2016-6022MedMar 31, 2017
IBM
RQM
risk 0.35cvss 5.4epss 0.01
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.…
CVE-2017-1143MedMar 27, 2017
IBM
Kenexa Lcms Premier
risk 0.35cvss 5.3epss 0.01
IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the…
CVE-2016-9737MedMar 27, 2017
IBM
TRIRIGA
risk 0.35cvss 5.4epss 0.01
IBM TRIRIGA 3.3, 3.4, and 3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #:…
CVE-2016-6056MedMar 27, 2017
IBM
Call Center For Commerce
risk 0.35cvss 5.4epss 0.01
IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2017-1146MedMar 20, 2017
IBM
Content Navigator
risk 0.35cvss 5.4epss 0.01
IBM Content Navigator 2.0.3 and 3.0.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-9696MedMar 20, 2017
IBM
Rhapsody DM
risk 0.35cvss 5.4epss 0.01
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. IBM Reference #: 1999960.
CVE-2016-9694MedMar 20, 2017
IBM
Rhapsody DM
risk 0.35cvss 5.4epss 0.01
IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM…
CVE-2016-9006MedMar 8, 2017
IBM
Urbancode Deploy
risk 0.35cvss 5.4epss 0.01
IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference…
CVE-2017-1133MedMar 7, 2017
IBM
Qradar Security Information And Event Manager
risk 0.35cvss 5.4epss 0.01
IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: 1999534.

Page 77 of 166