Vulnerabilidades en IBM
4716 resultadosCVE-2017-1099—IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. IBM X-Force EPSS 3.3%CVE-2020-4462HIGHIBM Sterling External Authentication Server 6.0.1, 6.0.0, 2.4.3.2, and 2.4.2 and IBM Sterling Secure Proxy 6.0.1, 6.0.0, 3.4.3, and 3.4.2 arEPSS 3.2%CVE-2018-1932MEDIUMIBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the management server that could EPSS 3.2%CVE-2017-1789CRITICALIBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecified methods. IBM X-ForEPSS 3.2%CVE-2019-4046MEDIUMIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headersEPSS 3.2%CVE-2017-1583—IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information causedEPSS 3.2%CVE-2018-1373HIGHIBM Security Guardium Big Data Intelligence (SonarG) 3.1 uses an inadequate account lockout setting that could allow a remote attacker to brEPSS 3.2%CVE-2017-1318—IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by comEPSS 3.1%CVE-2019-4080MEDIUMIBM WebSphere Application Server Admin Console 7.5, 8.0, 8.5, and 9.0 is vulnerable to a potential denial of service, caused by improper parEPSS 3.1%CVE-2020-4276HIGHIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerability when using token-bEPSS 3.1%CVE-2020-4436HIGHCertain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knEPSS 3.1%CVE-2017-1635—IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error. A EPSS 3.1%CVE-2019-4178MEDIUMIBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL EPSS 3.1%CVE-2020-4180HIGHIBM Security Guardium 11.1 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-cEPSS 3.0%CVE-2020-4545HIGHIBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link LEPSS 3.0%CVE-2020-4272MEDIUMIBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-craftedEPSS 3.0%CVE-2017-1440—IBM Emptoris Services Procurement 10.0.0.5 could allow a remote attacker to include arbitrary files. A remote attacker could send a speciallEPSS 3.0%CVE-2018-1513MEDIUMIBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerability allows users to eEPSS 2.9%CVE-2021-29725HIGHIBM Secure External Authentication Server 2.4.3.2, 6.0.1, 6.0.2 and IBM Secure Proxy 3.4.3.2, 6.0.1, 6.0.2 could allow a remote user to consEPSS 2.9%CVE-2020-4561CRITICALIBM Cognos Analytics 11.0 and 11.1 DQM API allows submitting of all control requests in unauthenticated sessions. This allows a remote attacEPSS 2.9%