Vulnerabilities in IBM Corporation
288 resultsCVE-2017-1134—IBM Reliable Scalable Cluster Technology could allow a local user to escalate their privileges to gain root access. IBM Reference #: 1998459EPSS 0.3%CVE-2016-6097—IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system.EPSS 0.3%CVE-2016-0382—The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally capturEPSS 0.3%CVE-2016-0202—A vulnerability has been identified in tasks, backend object generated for handling any action performed by the application in IBM Cloud OrcEPSS 0.3%CVE-2016-2981—An undisclosed vulnerability in the CLM applications in IBM Jazz Team Server may allow unauthorized access to user credentials. IBM ReferencEPSS 0.3%CVE-2016-6110—IBM Tivoli Storage Manager discloses unencrypted login credentials to Vmware vCenter that could be obtained by a local user.EPSS 0.3%CVE-2017-1205—IBM Platform LSF 10.1 contains an unspecified vulnerability that could allow a local user to escalate their privileges and obtain root accesEPSS 0.3%CVE-2016-8981—IBM BigFix Inventory v9 allows web pages to be stored locally which can be read by another user on the system.EPSS 0.3%CVE-2016-3024—IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system.EPSS 0.3%CVE-2016-6092—IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user.EPSS 0.3%CVE-2017-1170—IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's session. IBM X-ForceEPSS 0.3%CVE-2016-5938—IBM Kenexa LMS on Cloud allows web pages to be stored locally which can be read by another user on the system.EPSS 0.3%CVE-2016-8967—IBM BigFix Inventory v9 9.2 stores user credentials in plain in clear text which can be read by a local user.EPSS 0.3%CVE-2016-8963—IBM BigFix Inventory v9 stores potentially sensitive information in log files that could be read by a local user.EPSS 0.3%CVE-2016-5894—IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. AEPSS 0.3%CVE-2015-5013—The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated usersEPSS 0.3%CVE-2016-0206—IBM Cloud Orchestrator could allow a local authenticated attacker to cause the server to slow down for a short period of time by using a speEPSS 0.3%CVE-2015-7493—IBM InfoSphere Information Server could allow a local user under special circumstances to execute commands during installation processes thaEPSS 0.3%CVE-2016-9985—IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999EPSS 0.3%CVE-2017-1124—IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection. IBM EPSS 0.3%