Vulnerabilities in IBM Corporation
288 resultsCVE-2016-9723—IBM QRadar 7.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus EPSS 0.6%CVE-2016-6032—IBM Rational Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrEPSS 0.6%CVE-2017-1150—IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specializeEPSS 0.6%CVE-2017-1152—IBM Financial Transaction Manager 3.0.1 and 3.0.2 does not properly update the SESSIONID with each request, which could allow a user to obtaEPSS 0.6%CVE-2016-6037—IBM Rational Team Concert (RTC) is vulnerable to HTML injection. A remote attacker with project administrator privileges could send a projecEPSS 0.6%CVE-2016-0320—IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users eEPSS 0.6%CVE-2016-6044—IBM Tivoli Storage Manager Operations Center could allow an authenticated attacker to enable or disable the application's REST API, which maEPSS 0.6%CVE-2016-5933—IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewallEPSS 0.6%CVE-2017-1159—IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuaEPSS 0.6%CVE-2016-6100—IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite EPSS 0.6%CVE-2016-6001—IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing forEPSS 0.6%CVE-2016-8917—IBM Sterling Order Management 9.2 - 9.5 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and uEPSS 0.6%CVE-2016-5937—IBM Kenexa LCMS Premier on Cloud is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorEPSS 0.6%CVE-2016-6033—IBM Tivoli Storage Manager for Virtual Environments 7.1 (VMware) is vulnerable to cross-site request forgery which could allow an attacker tEPSS 0.6%CVE-2016-6045—IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious EPSS 0.6%CVE-2016-6103—IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious EPSS 0.6%CVE-2016-8941—IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unEPSS 0.6%CVE-2016-5942—IBM Kenexa LMS on Cloud is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WebEPSS 0.6%CVE-2016-6039—IBM Jazz Reporting Service (JRS) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code iEPSS 0.5%CVE-2016-6030—IBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI EPSS 0.5%