CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

96 matches found

IBM Security Bulletins•added 2025/04/30 12:4 p.m.•13 views

Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907)

Summary The security issue described in CVE-2025-27907 has been identified in the WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

4.1CVSS6.5AI score0.00306EPSS

SaveExploits0Affected Software1

IBM Security Bulletins•added 2025/04/09 6:21 p.m.•21 views

Security Bulletin: IBM Software Support mobile app is vulnerable to multiple vulnerabilities due to 3rd party software

Summary This release includes information about multiple vulnerabilities, improving the overall security and stability of the application. The types of vulnerabilities resolved include: Axios Vulnerability: Addressed an issue that could potentially cause SSRF and credential leakage server and...

8.7CVSS6.8AI score0.01429EPSS

SaveExploits1Affected Software1

IBM Security Bulletins•added 2025/02/27 7:51 p.m.•24 views

Security Bulletin: IBM Software Support mobile app is vulnerable to multiple vulnerabilities due to 3rd party software

Summary This release includes information about multiple vulnerabilities, improving the overall security and stability of the application. The types of vulnerabilities resolved include: Cross-Site Scripting XSS Vulnerability: Addressed an issue that could allow an attacker to inject malicious...

9.3CVSS9.2AI score0.06307EPSS

SaveExploits7Affected Software1

CNVD•added 2025/02/17 12:0 a.m.•38 views

IBM Sterling B2B Integrator Cross-Site Scripting Vulnerability (CNVD-2025-04976)

IBM Sterling B2B Integrator is a suite of software from International Business Machines IBM that integrates critical B2B processes, transactions and relationships. The software supports secure integration of complex B2B processes with diverse partner communities. A cross-site scripting...

5.4CVSS6.1AI score0.00213EPSS

SaveExploits0References1

NVD•added 2025/01/10 2:15 p.m.•20 views

CVE-2024-41787

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code...

9.8CVSS0.01112EPSS

SaveExploits0References1

CNVD•added 2024/12/25 12:0 a.m.•19 views

IBM Cognos Analytics File Upload Vulnerability (CNVD-2025-00968)

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. IBM Cognos Analytics...

8CVSS7AI score0.00425EPSS

SaveExploits0References1