Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 996

Export CSV
CVE-2022-40232

IBM Sterling B2B Integrator Standard Edition improper access control

IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls. IBM X-Force ID: 235597.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Sterling B2b Integrator Linux Kernel and 1 more
CVE-2022-43579

IBM Sterling B2B Integrator Standard Edition cross-site scripting

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 238684.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Sterling B2b Integrator Linux Kernel and 1 more
CVE-2022-40231

IBM Sterling B2B Integrator Standard Edition improper access control

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls. IBM X-Force ID: 235533.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Sterling B2b Integrator Linux Kernel and 1 more
CVE-2023-24960

IBM InfoSphere Information Server information disclosure

IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Infosphere Information Server Linux Kernel and 1 more
CVE-2021-29827

IBM InfoSphere Information Server clickjacking

IBM InfoSphere Information Server 11.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim.

CVSS 3.1 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Infosphere Information Server Linux Kernel and 1 more
CVE-2023-25928

IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 247646.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Infosphere Information Server Linux Kernel and 1 more
CVE-2023-50946

IBM Common Licensing information disclosure

IBM Common Licensing 9.0 could allow an authenticated user to modify a configuration file that they should not have access to due to a broken authorization mechanism.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Common Licensing Linux Kernel and 1 more
CVE-2024-52363

IBM InfoSphere Information Server directory traversal

IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Infosphere Information Server Linux Kernel and 1 more
CVE-2023-23472

IBM InfoSphere Information Server information disclosure

IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7) could allow an authenticated user to obtain sensitive information that could aid in further attacks against the system.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Ibm Linux Microsoft
Products
Aix Infosphere Information Server Linux Kernel and 1 more
CVE-2023-26281

IBM HTTP Server denial of service

IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296.

CVSS 3.1 · 5.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Http Server and 4 more
CVE-2023-26283

IBM WebSphere Application Server cross-site scripting

IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 248416.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix I and 5 more
CVE-2024-27254

IBM Db2 for Linux, UNIX and Windows denial of service

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.5, 11.1, and 11.5 federated server is vulnerable to denial of service with a specially crafted query under certain conditions. IBM X-Force ID: 283813.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 4 more
CVE-2023-47747

IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272646.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 4 more
CVE-2023-47746

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service using a specially crafted query. IBM X-Force ID: 272644.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 5 more
CVE-2023-30449

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 253439.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 4 more
CVE-2023-30448

IBM Db2 denial of service

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253437.

CVSS 3.1 · 5.9 Medium EPSS 1.4% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 3 more
CVE-2023-30445

IBM Db2 denial of service

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253357.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Hp Ibm Linux and 2 more
Products
Hp-ux Aix Db2 and 4 more