Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

1743 matches found

NVD
NVD•added 2020/02/19 4:15 p.m.•19 views

CVE-2019-4429

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1628...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
Prion
Prion•added 2020/02/19 4:15 p.m.•16 views

Cross site scripting

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1628...

3.5CVSS5.2AI score0.00561EPSS
SaveExploits0References2Affected Software9
Cvelist
Cvelist•added 2020/02/19 3:15 p.m.•27 views

CVE-2019-4429

IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 1628...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
Prion
Prion•added 2020/02/12 4:15 p.m.•19 views

Cross site scripting

IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

3.5CVSS5.1AI score0.00561EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2020/02/12 4:10 p.m.•19 views

CVE-2019-4431

IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID:...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins•added 2020/02/05 12:53 a.m.•22 views

Security Bulletin: IBM B2B Advanced Communications is vulnerable to cross-site scripting due to the vulnerability of 10x (CVE-2016-5892)

Summary IBM B2B Advanced Communications is vulnerable to cross-site scripting due to the vulnerability of 10x. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality, potentially leading to credentials disclosure within a trusted...

5.4CVSS0.8AI score0.00615EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins•added 2020/02/05 12:53 a.m.•22 views

Security Bulletin: IBM Sterling B2B Integrator Is Vulnerable to Cross-site Scripting Due to the Vulnerability of 10x (CVE-2016-5892)

Summary IBM Sterling B2B Integrator is vulnerable to cross-site scripting due to the vulnerability of 10x. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality, potentially leading to credentials disclosure within a trusted...

5.4CVSS1.7AI score0.00615EPSS
SaveExploits0Affected Software1
NVD
NVD•added 2020/02/04 5:15 p.m.•21 views

CVE-2019-4451

IBM Security Identity Manager 6.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 163493...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
NVD
NVD•added 2020/01/28 7:15 p.m.•19 views

CVE-2019-4632

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170004...

6.1CVSS5.8AI score0.0073EPSS
SaveExploits0References2
Prion
Prion•added 2020/01/28 7:15 p.m.•17 views

Cross site scripting

IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 170004...

4.3CVSS6AI score0.0073EPSS
SaveExploits0References2Affected Software1
OSV
OSV•added 2019/12/30 4:15 p.m.•5 views

CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168924...

5.4CVSS5.9AI score0.00673EPSS
SaveExploits0References2
Prion
Prion•added 2019/12/30 4:15 p.m.•18 views

Cross site scripting

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168924...

3.5CVSS5.2AI score0.00673EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2019/12/30 3:35 p.m.•20 views

CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 168924...

5.4CVSS5.2AI score0.00673EPSS
SaveExploits0References2
CVE
CVE•added 2019/12/30 3:35 p.m.•51 views

CVE-2019-4623

IBM Cognos Analytics 11.0 and 11.1 are vulnerable to cross-site scripting in the Web UI, potentially allowing arbitrary JavaScript and credential disclosure in a trusted session. The issue is documented as CVE-2019-4623 with a MEDIUM impact (CVSS v3.1 base score 5.4). Remediation per IBM’s bullet...

5.4CVSS5.4AI score0.00673EPSS
SaveExploits0References2Affected Software1
NVD
NVD•added 2019/12/20 5:15 p.m.•19 views

CVE-2019-4555

IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166204...

5.4CVSS5.2AI score0.00772EPSS
SaveExploits0References3
Prion
Prion•added 2019/12/20 5:15 p.m.•18 views

Cross site scripting

IBM Cognos Analytics 11.0 and 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 166204...

3.5CVSS5.2AI score0.00772EPSS
SaveExploits0References3Affected Software1
Prion
Prion•added 2019/12/20 5:15 p.m.•22 views

Cross site scripting

IBM Financial Transaction Manager 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172882...

4.3CVSS5.6AI score0.00754EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2019/12/13 4:15 p.m.•16 views

Cross site scripting

The Case Builder component shipped with 18.0.0.1 through 19.0.0.2 and IBM Case Manager 5.1.1 through 5.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to...

3.5CVSS5.2AI score0.00748EPSS
SaveExploits0References3Affected Software2
NVD
NVD•added 2019/12/11 3:15 p.m.•29 views

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2019/12/11 2:25 p.m.•26 views

CVE-2019-4665

IBM Spectrum Scale 4.2 and 5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 171247...

5.4CVSS5.2AI score0.00561EPSS
SaveExploits0References2
Rows per page
Query Builder