ibm Vulnerability Advisory Catalog

Total 8,057 security vulnerabilities recorded for ibm software and firmware.

← Back to All Vendors
Component: security_verify_access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access...

๐Ÿ“… 2026-04-01
CVSS 8.1 Dossier →
CVE-2026-2862 MEDIUM
Component: security_verify_access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access...

๐Ÿ“… 2026-04-01
CVSS 5.3 Dossier →
Component: security_verify_access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access...

๐Ÿ“… 2026-04-01
CVSS 3.1 Dossier →
CVE-2026-1491 MEDIUM
Component: security_verify_access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access...

๐Ÿ“… 2026-04-01
CVSS 5.3 Dossier →
Component: security_verify_access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access...

๐Ÿ“… 2026-04-01
CVSS 7.3 Dossier →
Component: datapower_gateway

IBM DataPower Gateway 10.6CD 10.6.1.0 through 10.6.5.0 and IBM DataPower Gateway 10.5.0 10.5.0.0 through 10.5.0.20 and IBM DataPower Gateway 10.6.0 10...

๐Ÿ“… 2026-04-01
CVSS 4.1 Dossier →
Component: aspera_shares

IBM Aspera Shares 1.9.9 through 1.11.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive inf...

๐Ÿ“… 2026-04-01
CVSS 5.9 Dossier →
Component: storage_protect_server

IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection. A remote attacker could send specially crafted SQL st...

๐Ÿ“… 2026-04-01
CVSS 7.6 Dossier →
Component: knowledge_catalog

IBM Knowledge Catalog Standard Cartridge 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.1, 5.1.1, 5,1.2, 5.1.3, 5.2.0, 5.2.1 stores potentially sensitive information i...

๐Ÿ“… 2026-03-25
CVSS 4.4 Dossier →
Component: maximo_application_suite

IBM Maximo Application Suite - Monitor Component 9.1, 9.0, 8.11, and 8.10 could allow an unauthorized user to inject data into log messages due to imp...

๐Ÿ“… 2026-03-25
CVSS 4.0 Dossier →
CVE-2026-2485 MEDIUM
Component: infosphere_information_server

IBM Infosphere Information Serverย 11.7.0.0 throughย 11.7.1.6 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user ...

๐Ÿ“… 2026-03-25
CVSS 4.8 Dossier →
CVE-2026-2484 MEDIUM
Component: infosphere_information_server

IBM InfoSphere Information Serverย 11.7.0.0 throughย 11.7.1.6ย is affected by an information exposure vulnerability caused by overly verbose error messag...

๐Ÿ“… 2026-03-25
CVSS 4.3 Dossier →
CVE-2026-2483 MEDIUM
Component: infosphere_information_server

IBM InfoSphere Information Serverย 11.7.0.0 throughย 11.7.1.6ย is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary ...

๐Ÿ“… 2026-03-25
CVSS 5.4 Dossier →
CVE-2026-1561 MEDIUM
Component: websphere_application_server

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request for...

๐Ÿ“… 2026-03-25
CVSS 5.4 Dossier →
CVE-2026-1262 MEDIUM
Component: infosphere_information_server

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is affected by an information disclosure vulnerability....

๐Ÿ“… 2026-03-25
CVSS 4.3 Dossier →
CVE-2026-1015 MEDIUM
Component: infosphere_information_server

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attac...

๐Ÿ“… 2026-03-25
CVSS 5.4 Dossier →
CVE-2026-1014 MEDIUM
Component: infosphere_information_server

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to exposure of sensitive information via JSON server response manipulation....

๐Ÿ“… 2026-03-25
CVSS 6.5 Dossier →
Component: concert

IBM Concert 1.0.0 through 2.2.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle tech...

๐Ÿ“… 2026-03-25
CVSS 5.9 Dossier →
Component: concert

IBM Concert 1.0.0 through 2.2.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatio...

๐Ÿ“… 2026-03-25
CVSS 5.9 Dossier →
Component: concert

IBM Concert 1.0.0 through 2.2.0 could allow an attacker to access sensitive information in memory due to the buffer not properly clearing resources....

๐Ÿ“… 2026-03-25
CVSS 6.2 Dossier →
Component: concert

IBM Concert 1.0.0 through 2.2.0 could allow a local user to obtain sensitive information due to missing function level access control....

๐Ÿ“… 2026-03-25
CVSS 5.1 Dossier →
Component: concert

IBM Concert 1.0.0 through 2.2.0 could allow a privileged user to perform unauthorized actions due to improper restriction of channel communication to ...

๐Ÿ“… 2026-03-25
CVSS 5.1 Dossier →
Component: infosphere_information_server

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 IBM InfoSphere DataStage Flow Designer is vulnerable to cross-site request forgery which c...

๐Ÿ“… 2026-03-25
CVSS 4.3 Dossier →
Component: infosphere_information_server

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 product stores user credentials and other sensitive information in plain text which can be...

๐Ÿ“… 2026-03-25
CVSS 7.1 Dossier →
Page 7 of 336 (8,057 Total Records)