Check CVE Id
Check CWE Id
IBM Spectrum Scale 4.1.1 and 4.2.0 - 4.2.3 could allow a local unprivileged user access to information located in dump files. User data could be sent to IBM during service engagements. IBM X-Force ID: 133378.
General parallel file system
CVSS Base Score
IBM Sterling File Gateway 22.214.171.124 through 126.96.36.199 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X...
IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V188.8.131.52, and IBM Water Operations for Waternamics V5.1.0 - V184.108.40.206 does not require that users should have strong passwords by de...
IBM Jazz for Service Management 1.1.3 is vulnerable to HTTP header injection, caused by incorrect trust in the HTTP Host header during caching. By sending a specially crafted HTTP GET request, a remote attacker could exploit this vulnerability to inj...
IBM Business Automation Workflow V220.127.116.11 through V18.104.22.168 and IBM Business Process Manager V22.214.171.124 through V126.96.36.199 Cumulative Fix 2018.03, V188.8.131.52 through V184.108.40.206 Cumulative Fix 2017.06, and V220.127.116.11 through V18.104.22.168 CF2 is vulnerable to cross...
IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror for i might have user profiles with elevated privileges caused by incorrect processing during a restore of multiple user profiles. ...
IBM Cloud Automation Manager 3.1.2 could allow a malicious user on the client side (with access to client computer) to run a custom script. IBM X-Force ID: 158278.
IBM Cloud Automation Manager 3.1.2 could allow a user to be impropertly redirected and obtain sensitive information rather than receive a 404 error message. IBM X-Force ID: 158274.
IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume mem...
Back to Top