12960 matches found
CVE-2021-20414
IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...
CVE-2020-4938
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815...
Cross site scripting
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20416...
Cross site scripting
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...
Cross site request forgery (csrf)
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815...
Cross site scripting
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 204349...
Design/Logic Flaw
IBM Guardium Data Encryption GDE 3.0.0.2 could allow a user to bruce force sensitive information due to not properly limiting the number of interactions. IBM X-Force ID: 196216...
CVE-2021-29805
CVE-2021-29805 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The IBM Security Bulletin indicates the WebGUI is vulnerable to a stored cross-site scripting (XSS) flaw in the 8.1.0 WebUI, allowing an attacker to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a ...
CVE-2021-29805
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20426...
CVE-2021-29804
CVE-2021-29804 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0. The IBM WebGUI is vulnerable to stored cross-site scripting, allowing an attacker to inject JavaScript in the Web UI, potentially leading to credentials disclosure in a trusted session. Public documents include a remediation: apply Fix ...
CVE-2021-29803
IBM Tivoli Netcool/OMNIbusGUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 20416...
CVE-2021-29803
CVE-2021-29803 affects IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 WebGUI, vulnerable to stored cross-site scripting (XSS) that can allow embedding arbitrary JavaScript in the Web UI and potentially disclose credentials within a trusted session. The IBM security bulletin for this family (CVE-2021-29803,...
CVE-2021-29794
IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 203556...
CVE-2021-20414
CVE-2021-20414 affects IBM Guardium Data Encryption (GDE) 3.0.0.2. The vulnerability allows a user to brute-force sensitive information due to not properly limiting the number of interactions. IBM’s security bulletin fixes this by upgrading to GDE 5.0.0.x (fixes are listed in the bulletin). No ex...
CVE-2020-4938
IBM MQ Appliance 9.1 and 9.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 191815...
CVE-2020-4938
CVE-2020-4938 affects IBM MQ Appliance 9.1 and 9.2 and is a cross-site request forgery (CSRF) vulnerability. IBM’s Security Bulletin (IT35704) states remediation via firmware fixes: 9.1 LTS requires 9.1.0.8 or later; 9.1 CD requires 9.2.2 CD interim fix; 9.2 LTS requires 9.2.0.2 interim fix; 9.2 ...
CVE-2021-20365
IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036...
CVE-2021-20424
IBM Cloud Pak for Applications 4.3 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. X-Force ID: 196309...
CVE-2021-29730
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164...
CVE-2021-29730
IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 201164...