Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user tCheck this weekEPSS 26.00%Jun 3, 2025
- Medium5.5IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment.Check this weekEPSS 13.00%Jun 3, 2025
- Medium6.3IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.Check if you run itEPSS 0.25%Jun 1, 2025
- Medium6.5IBM Planning Analytics Local 2.0 and 2.1 could allow a privileged user to delete files from directories due to improper pathname restriction.Check if you run itEPSS 0.46%Jun 1, 2025
- Medium4.8IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.Check if you run itEPSS 0.20%Jun 1, 2025
- Medium5.4IBM Planning Analytics Local 2.0 and 2.1 is vulnerable to cross-site scripting.Check this weekEPSS 21.00%Jun 1, 2025
- Medium6.5IBM InfoSphere Information Server 11.7 stores credential information for database authentication in a cleartext parameter file that could be viewed by an authenticated user.Check this weekEPSS 22.00%Jun 1, 2025
- Medium6.5IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.1.0 through 11.1.4.7, 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as tCheck this weekEPSS 41.00%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 is vulnerable to a denial of service as the server may crash underCheck if you run itEPSS 0.34%May 29, 2025
- Medium5.3IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user to cause a denial of service wheCheck if you run itEPSS 0.38%May 29, 2025
- Medium4.3IBM Sterling Secure Proxy 6.2.0.0 through 6.2.0.1 could allow a remote attacker to traverse directories on the system.Check this weekEPSS 52.00%May 28, 2025
- Medium5.9IBM Sterling Secure Proxy 6.0.0.0 through 6.0.3.1, 6.1.0.0 through 6.1.0.0, and 6.2.0.0 through 6.2.0.1 uses weaker than expected cryptographic algorithms that could allow an attacCheck this weekEPSS 23.00%May 28, 2025
- Critical9.8IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamicallyCheck if you run itEPSS 1.03%May 28, 2025
- Medium4.9IBM Security Guardium 12.0 could allow a privileged user to download any file on the system due to improper escaping of input.Check this weekEPSS 40.00%May 28, 2025
- Medium4.3IBM Security Guardium 12.0 could allow an authenticated user to obtain sensitive information due to an incorrect authentication check.Check this weekEPSS 28.00%May 28, 2025
- Medium4.3IBM Security Guardium 12.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.Check this weekEPSS 35.00%May 28, 2025
- Medium5.5IBM DS8900F and DS8A00 Hardware Management Console (HMC) is vulnerable to stored cross-site scripting.Check this weekEPSS 22.00%May 27, 2025
- Medium6.5IBM Controller 11.0.0, 11.0.1, and 11.1.0 application could allow an authenticated user to obtain sensitive credentials that may be inadvertently included within the source code.Check if you run itEPSS 0.31%May 27, 2025
- Medium5.4IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection.Check if you run itEPSS 0.26%May 22, 2025
- High7.1IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-sidCheck if you run itEPSS 0.34%May 22, 2025
- High7.1IBM Aspera Faspex 5.0.0 through 5.0.12 could allow an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to improper pCheck if you run itEPSS 0.34%May 22, 2025
- Medium6.5IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation.Check this weekEPSS 19.00%May 20, 2025
- Medium6.5IBM Security ReaQta EDR 3.12 could allow an attacker to spoof a trusted entity by interfering with the communication path between the host and client.Check this weekEPSS 25.00%May 20, 2025
- High8.5IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability.Check if you run itEPSS 0.45%May 17, 2025
- Medium5.4IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection.Check this weekEPSS 27.00%May 16, 2025