CVE-2016-2872

IBM QRadar SIEM and QRadar Incident Forensics (7.2.x) are affected by CVE-2016-2872 due to a path traversal in parameters that allows remote attackers to read arbitrary files via a crafted URL. Affected products: QRadar SIEM 7.2.x before 7.2.7 and QRadar Incident Forensics 7.2.x before 7.2.7. Roo...

CVE-2016-2883

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

CVE-2016-0399

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-5267

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site scripting XSS issue allows remote...

CVE-2016-2883: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-0387...

CVE-2016-0398: Improper Input Validation

IBM Cognos Analytics CA 11.0 before 11.0.2 allows remote attackers to conduct content-spoofing attacks via a crafted URL...

PT-2016-4184

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics CA versions 11.0 through 11.0.2 Description The issue allows remote attackers to conduct content-spoofing attacks via a crafted URL. Recommendations For versions 11.0 through 11.0.2, update to version 11.0.2 or later to...

CVE-2016-0387: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM TRIRIGA Application Platform 3.3 before 3.3.2.6, 3.4 before 3.4.2.4, and 3.5 before 3.5.0.2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, a different vulnerability than CVE-2016-2883...

PT-2016-2326

Name of the Vulnerable Software and Affected Versions IBM Maximo Asset Management versions 7.1 through 7.1.1.13 IBM Maximo Asset Management versions 7.5 before 7.5.0.9 IFIX007 IBM Maximo Asset Management versions 7.6 before 7.6.0.5 FP005 Description The issue is related to a cross-site scripting...

CVE-2016-0400: Undefined Security Weakness

CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3, 7.1.1 before 7.1.1.1, 8.5 before 8.5.0.3, and 8.6 before 8.6.0.8 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL...

CVE-2016-0399: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5 before 7.5.0.9 IFIX007, and 7.6 before 7.6.0.5 FP005 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL...

PT-2016-4178

Name of the Vulnerable Software and Affected Versions IBM TRIRIGA Application Platform versions 3.3 before 3.3.2.6 IBM TRIRIGA Application Platform versions 3.4 before 3.4.2.4 IBM TRIRIGA Application Platform versions 3.5 before 3.5.0.2 Description A cross-site scripting XSS issue allows remote...

Open-Xchange AppSuite Cross-Site Scripting Vulnerability (CNVD-2016-04414)

Open-Xchange AppSuite OX AppSuite is a suite of Web-based cloud desktop environments from Open-Xchange, Inc. in the United States. The environment allows users to manage email, tasks, files, etc. more intuitively. A cross-site scripting vulnerability exists in OX AppSuite 7.8.1 and earlier...

CVE-2016-0229

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0229

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0229

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2016-0229: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in IBM Marketing Platform 8.6.x and 9.x before 9.1.2.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Cisco Unified Contact Center Enterprise through 10.52 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCux59650...

IBM QRadar SIEM and Security QRadar Incident Forensics Path Traversal Vulnerabilities

IBM QRadar SIEM and IBM Security QRadar Incident Forensics are both products of IBM USA. The former is a suite of solutions that utilize security intelligence to protect assets and information from advanced threats; the latter is a suite of security forensic investigation software. A path travers...