Login Request a demo
IC
Vendor
IBM Corporation
85 products with CVEs on record
288
CVEs
0
On KEV
0
New 30D
Products
KL
Kenexa LMS on Cloud
IBM Corporation
8.8
21 CVEs0 on KEV0 new
RC
Rational Collaborative Lifecycle Management
IBM Corporation
8.1
17 CVEs0 on KEV0 new
AM
Access Manager
IBM Corporation
9.1
16 CVEs0 on KEV0 new
QS
QRadar SIEM
IBM Corporation
8.5
13 CVEs0 on KEV0 new
KL
Key Lifecycle Manager
IBM Corporation
9.8
12 CVEs0 on KEV0 new
KL
Kenexa LCMS Premier on Cloud
IBM Corporation
8.8
11 CVEs0 on KEV0 new
BI
BigFix Inventory
IBM Corporation
8.1
8 CVEs0 on KEV0 new
WM
WebSphere MQ
IBM Corporation
9.8
8 CVEs0 on KEV0 new
BP
BigFix Platform
IBM Corporation
10.0
7 CVEs0 on KEV0 new
UD
UrbanCode Deploy
IBM Corporation
10.0
7 CVEs0 on KEV0 new
II
InfoSphere Information Server
IBM Corporation
8.1
6 CVEs0 on KEV0 new
JR
Jazz Reporting Service
IBM Corporation
5.4
6 CVEs0 on KEV0 new
TA
TRIRIGA Application Platform
IBM Corporation
8.8
6 CVEs0 on KEV0 new
AI
AIX
IBM Corporation
7.8
5 CVEs0 on KEV0 new
CO
Connections
IBM Corporation
5.4
5 CVEs0 on KEV0 new
MA
Maximo Asset Management
IBM Corporation
8.4
5 CVEs0 on KEV0 new
PI
Privileged Identity Manager
IBM Corporation
9.8
5 CVEs0 on KEV0 new
RD
Rational DOORS Next Generation
IBM Corporation
5.4
5 CVEs0 on KEV0 new
RR
Rational Rhapsody Design Manager
IBM Corporation
8.1
5 CVEs0 on KEV0 new
TS
Tivoli Storage Manager
IBM Corporation
8.8
5 CVEs0 on KEV0 new
CO
Cloud Orchestrator
IBM Corporation
5.5
4 CVEs0 on KEV0 new
CB
Cognos Business Intelligence
IBM Corporation
8.8
4 CVEs0 on KEV0 new
DO
Domino
IBM Corporation
6.1
4 CVEs0 on KEV0 new
IB
Integration Bus
IBM Corporation
9.1
4 CVEs0 on KEV0 new
TS
Tivoli Storage Manager Extended Edition
IBM Corporation
8.8
4 CVEs0 on KEV0 new
WA
WebSphere Application Server
IBM Corporation
8.1
4 CVEs0 on KEV0 new
WP
WebSphere Portal
IBM Corporation
8.8
4 CVEs0 on KEV0 new
BP
Business Process Manager Advanced
IBM Corporation
6.1
3 CVEs0 on KEV0 new
CA
Cognos Analytics
IBM Corporation
5.4
3 CVEs0 on KEV0 new
CT
Cognos TM1
IBM Corporation
7.5
3 CVEs0 on KEV0 new
IM
Identity Manager
IBM Corporation
7.8
3 CVEs0 on KEV0 new
IN
iNotes
IBM Corporation
6.1
3 CVEs0 on KEV0 new
MP
Marketing Platform
IBM Corporation
8.8
3 CVEs0 on KEV0 new
SC
Spectrum Control Standard Select Edition
IBM Corporation
8.8
3 CVEs0 on KEV0 new
TA
Tivoli Application Dependency Discovery Manager
IBM Corporation
6.5
3 CVEs0 on KEV0 new
WC
WebSphere Commerce Enterprise
IBM Corporation
9.8
3 CVEs0 on KEV0 new
AO
Algo One
IBM Corporation
6.5
2 CVEs0 on KEV0 new
AS
AppScan Source
IBM Corporation
5.3
2 CVEs0 on KEV0 new
BI
BigInsights
IBM Corporation
5.4
2 CVEs0 on KEV0 new
CN
Content Navigator
IBM Corporation
5.4
2 CVEs0 on KEV0 new
FT
Financial Transaction Manager
IBM Corporation
5.4
2 CVEs0 on KEV0 new
IN
Interact
IBM Corporation
8.8
2 CVEs0 on KEV0 new
SB
Sterling B2B Integrator
IBM Corporation
6.1
2 CVEs0 on KEV0 new
SO
Sterling Order Management
IBM Corporation
8.8
2 CVEs0 on KEV0 new
TC
Tealeaf Customer Experience
IBM Corporation
5.9
2 CVEs0 on KEV0 new
TS
Tivoli Storage Manager for Virtual Environments
IBM Corporation
8.8
2 CVEs0 on KEV0 new
WC
WebSphere Cast Iron Cloud integration
IBM Corporation
8.6
2 CVEs0 on KEV0 new
AC
API Connect
IBM Corporation
7.3
1 CVEs0 on KEV0 new
AE
AppScan Enterprise
IBM Corporation
7.3
1 CVEs0 on KEV0 new
AP
Atlas Policy Suite
IBM Corporation
8.8
1 CVEs0 on KEV0 new
BR
BigFix Remote Control
IBM Corporation
7.5
1 CVEs0 on KEV0 new
CC
Call Center for Commerce
IBM Corporation
5.4
1 CVEs0 on KEV0 new
CA
Campaign
IBM Corporation
5.4
1 CVEs0 on KEV0 new
CD
Cognos Disclosure Management
IBM Corporation
5.3
1 CVEs0 on KEV0 new
CS
Cram Social Program Management
IBM Corporation
9.1
1 CVEs0 on KEV0 new
DL
DashDB Local
IBM Corporation
9.8
1 CVEs0 on KEV0 new
DF
DB2 for Linux, UNIX and Windows
IBM Corporation
3.1
1 CVEs0 on KEV0 new
DS
Directory Server
IBM Corporation
5.5
1 CVEs0 on KEV0 new
DM
Distributed Marketing
IBM Corporation
2.7
1 CVEs0 on KEV0 new
FC
FileNet Content Manager
IBM Corporation
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2019-4301
HB
HCL BigFix Self-Service Application (SSA)
IBM Corporation
8.4
1%
Feb 28BigFix Self-Service Application (SSA) is vulnerable to arbitrary code execution if Javascript code is included in Running Message or Post Message HTML
CVE-2019-4392
HA
HCL AppScan Standard Edition
IBM Corporation
9.8
1%
Feb 14HCL AppScan Standard Edition 9.0.3.13 and earlier uses hard-coded credentials which can be exploited by attackers to get unauthorized access to the system
CVE-2018-9068
SX
System x IMM2
IBM Corporation
7.5
1%
Jul 26The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected
CVE-2017-1289
RF
Runtimes for Java Technology
IBM Corporation
8.2
4%
May 22IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data
CVE-2017-1159
BP
Business Process Manager Advanced
IBM Corporation
5.4
1%
May 22IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
CVE-2017-1282
CN
Content Navigator
IBM Corporation
5.4
1%
May 22IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting
CVE-2016-6112
MP
Marketing Platform
IBM Corporation
8.8
1%
May 22IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over…
CVE-2017-1320
TF
Tivoli Federated Identity Manager
IBM Corporation
5.4
1%
May 22IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting
CVE-2017-1092
IS
Informix Servers
IBM Corporation
9.8
76%
May 22IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servers
CVE-2016-5979
DM
Distributed Marketing
IBM Corporation
2.7
1%
May 15IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates,…
CVE-2016-9750
QS
QRadar SIEM
IBM Corporation
6.5
1%
May 15IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user
CVE-2016-9735
RC
Rational Collaborative Lifecycle Management
IBM Corporation
4.3
1%
May 15IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces
CVE-2016-6037
RC
Rational Collaborative Lifecycle Management
IBM Corporation
4.8
1%
May 10IBM Rational Team Concert (RTC) is vulnerable to HTML injection
CVE-2017-1103
RC
Rational Collaborative Lifecycle Management
IBM Corporation
8.1
1%
May 10IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
CVE-2016-3032
CA
Cognos Analytics
IBM Corporation
5.4
1%
May 10IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
CVE-2016-6035
RC
Rational Collaborative Lifecycle Management
IBM Corporation
5.4
1%
May 10IBM Rational Quality Manager is vulnerable to cross-site scripting
CVE-2016-5888
IN
Interact
IBM Corporation
5.4
1%
May 10IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting
CVE-2017-1137
WA
WebSphere Application Server
IBM Corporation
8.1
2%
May 10IBM WebSphere Application Server 8.0 and 8.5.5 could provide weaker than expected security
CVE-2016-5889
IN
Interact
IBM Corporation
8.8
0%
May 10IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a…
CVE-2016-9692
WC
WebSphere Cast Iron Cloud integration
IBM Corporation
8.6
2%
May 5IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input
CVE-2016-0255
MP
Marketing Platform
IBM Corporation
6.1
1%
May 5IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input
CVE-2016-9691
WC
WebSphere Cast Iron Cloud integration
IBM Corporation
8.6
1%
May 5IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
CVE-2017-1156
WP
WebSphere Portal
IBM Corporation
8.8
1%
May 5IBM WebSphere Portal 8.5 and 9.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack
CVE-2016-2930
BR
BigFix Remote Control
IBM Corporation
7.5
2%
May 3IBM BigFix Remote Control 9.1.3 could allow a remote attacker to perform actions reserved for an administrator without authentication
CVE-2016-0382
TC
Tealeaf Customer Experience
IBM Corporation
4.0
0%
May 3The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network…
CVE-2016-9976
MA
Maximo Asset Management
IBM Corporation
8.4
2%
May 3IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to include arbitrary files
CVE-2017-1194
IW
IBM WebSphere Application Server
IBM Corporation
8.8
1%
Apr 28IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions…
CVE-2017-1141
II
IBM Insights Foundation for Energy
IBM Corporation
4.3
1%
Apr 28IBM Insights Foundation for Energy 1.0, 1.5, and 1.6 could allow an authenticated user to obtain sensitive information from error messages
CVE-2017-1170
WC
WebSphere Commerce Enterprise
IBM Corporation
5.3
0%
Apr 26IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session
CVE-2016-8924
MA
Maximo Asset Management
IBM Corporation
5.6
1%
Apr 26IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the failure to invalidate an existing session identifier
CVE-2016-8962
BI
BigFix Inventory
IBM Corporation
5.9
1%
Apr 26IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts
CVE-2016-3036
CT
Cognos TM1
IBM Corporation
7.5
2%
Apr 17IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of service, caused by a stack-based buffer overflow when parsing packets
CVE-2016-0228
MP
Marketing Platform
IBM Corporation
5.4
1%
Apr 17IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts
CVE-2016-3037
CT
Cognos TM1
IBM Corporation
5.7
1%
Apr 17IBM Cognos TM1 10.1 and 10.2 provides a service to return the victim's password with a valid session key
CVE-2017-1160
FT
Financial Transaction Manager
IBM Corporation
5.4
1%
Apr 17IBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.0.x is vulnerable to cross-site scripting
CVE-2017-1161
AC
API Connect
IBM Corporation
7.3
1%
Apr 17IBM API Connect 5.0.6.0 could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of URLs for the Developer Portal
CVE-2016-3038
CT
Cognos TM1
IBM Corporation
5.4
1%
Apr 17IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scripting
CVE-2016-8926
TA
Tivoli Application Dependency Discovery Manager
IBM Corporation
4.3
1%
Apr 14IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to read system files or data that is restricted to authorized users
CVE-2016-8925
TA
Tivoli Application Dependency Discovery Manager
IBM Corporation
6.5
1%
Apr 14IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 could allow a remote attacker to include arbitrary files which could allow the attacker to read any file on the…
CVE-2017-1205
SL
Spectrum LSF
IBM Corporation
8.8
0%
Apr 14IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root access
CVE-2017-1152
FT
Financial Transaction Manager
IBM Corporation
4.3
1%
Apr 14IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtain the ID in further attacks against…
CVE-2016-8927
TA
Tivoli Application Dependency Discovery Manager
IBM Corporation
5.4
1%
Apr 14IBM Tivoli Application Dependency Discovery Manager 7.2.2 and 7.3 is vulnerable to cross-site scripting
CVE-2016-6100
AP
Atlas Policy Suite
IBM Corporation
8.8
1%
Apr 5IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite 6.0.3 is vulnerable to cross-site…
CVE-2017-1180
TA
TRIRIGA Application Platform
IBM Corporation
5.3
1%
Apr 5The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access to
CVE-2016-3031
CA
Cognos Analytics
IBM Corporation
5.4
1%
Apr 5IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
CVE-2016-3015
CA
Cognos Analytics
IBM Corporation
5.4
1%
Apr 5IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting
CVE-2017-1154
AO
Algo One
IBM Corporation
6.5
1%
Mar 31IBM Algorithmics One-Algo Risk Application 4.9.1, 5.0, and 5.1.0 could allow a user to gain access to files in the local environment which should not be viewed by application…
CVE-2017-1171
TA
TRIRIGA Application Platform
IBM Corporation
4.3
1%
Mar 31The IBM TRIRIGA Application Platform 3.3, 3,4, and 3,5 contain a vulnerability that could allow an authenticated user to execute Application actions they do not have access to
CVE-2016-6036
RC
Rational Collaborative Lifecycle Management
IBM Corporation
5.4
1%
Mar 31IBM Rational Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting
CVE-2016-6022
RC
Rational Collaborative Lifecycle Management
IBM Corporation
5.4
1%
Mar 31IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting
CVE-2016-6111
CS
Cram Social Program Management
IBM Corporation
9.1
2%
Mar 31IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
CVE-2016-6031
RC
Rational Collaborative Lifecycle Management
IBM Corporation
5.4
1%
Mar 31IBM Rational Quality Manager 4.0, 5.0, and 6.0 are vulnerable to cross-site scripting
CVE-2016-8917
SO
Sterling Order Management
IBM Corporation
8.8
1%
Mar 31IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a…
CVE-2016-9707
RC
Rational Collaborative Lifecycle Management
IBM Corporation
8.1
2%
Mar 31IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
CVE-2016-9990
IN
iNotes
IBM Corporation
6.1
1%
Mar 31IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting
CVE-2016-8935
KL
Kenexa LMS on Cloud
IBM Corporation
5.4
1%
Mar 31IBM Kenexa LMS on Cloud 13.1, 13.2, 13.2.2, 13.2.3, 13.2.4 and 14.0.0 are vulnerable to cross-site scripting
CVE-2016-6056
CC
Call Center for Commerce
IBM Corporation
5.4
1%
Mar 27IBM Call Center for Commerce 9.3 and 9.4 is vulnerable to cross-site scripting
CVE-2017-1153
TA
TRIRIGA Application Platform
IBM Corporation
8.8
1%
Mar 27IBM TRIRIGA Report Manager 3.2 through 3.5 contains a vulnerability that could allow an authenticated user to execute actions that they do not have access to
CVE-2017-1142
KL
Kenexa LCMS Premier on Cloud
IBM Corporation
6.5
1%
Mar 27IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in…
CVE-2017-1143
KL
Kenexa LCMS Premier on Cloud
IBM Corporation
5.3
1%
Mar 27IBM Kenexa LCMS Premier on Cloud 9.x and 10.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport…