Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.0IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SCheck this weekEPSS 28.00%May 1, 2025
- Medium6.5IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 Client conneCheck this weekEPSS 39.00%May 1, 2025
- Medium6.1IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting.Check this weekEPSS 26.00%Apr 29, 2025
- Medium5.5IBM Maximo Asset Management 7.6.1.3 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.23%Apr 25, 2025
- Low3.7IBM InfoSphere Information Server 11.7 DataStage Flow Designer transmits sensitive information via URL or query parameters that could be exposed to an unauthorized actor using manCheck this weekEPSS 18.00%Apr 23, 2025
- Medium4.3IBM InfoSphere Information 11.7 Server authenticated user to obtain sensitive information when a detailed technical error message is returned in a request.Check this weekEPSS 30.00%Apr 23, 2025
- Medium6.3IBM InfoSphere Information 11.7 Server does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system.Check this weekEPSS 25.00%Apr 23, 2025
- Medium4.1IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF).Check this weekEPSS 35.00%Apr 22, 2025
- High8.4IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands as a privileged user due to execution of commands with unCheck this weekEPSS 22.00%Apr 22, 2025
- Critical9.3IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untCheck this weekEPSS 20.00%Apr 22, 2025
- Low3.8IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery (SSRF).Check if you run itEPSS 0.22%Apr 21, 2025
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i.Check if you run itEPSS 0.31%Apr 18, 2025
- Medium6.3IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 does not invalidate session after a browser closure which could allow an authenticated user to impersonate anotherCheck this weekEPSS 31.00%Apr 18, 2025
- Medium6.3IBM Sterling Connect:Direct Web Services 6.1.0, 6.2.0, and 6.3.0 could allow an authenticated user to spoof the identity of another user due to improper authorization which could aCheck this weekEPSS 33.00%Apr 18, 2025
- High7.2IBM i 7.6 contains a privilege escalation vulnerability due to incorrect profile swapping in an OS command.Check if you run itEPSS 0.43%Apr 17, 2025
- Medium5.9IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.12 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informatiCheck this weekEPSS 23.00%Apr 16, 2025
- UnknownIBM websphere_application_server Deserialization of Untrusted DataPatch nowKEVEPSS 34.18%Sep 18, 2024
- UnknownIBM bigfix_platform Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 22.55%Apr 8, 2024
- UnknownIBM operational_decision_manager Deserialization of Untrusted DataPatch nowKEVEPSS 73.40%Mar 22, 2024
- UnknownIBM operational_decision_manager Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 76.40%Mar 17, 2024
- UnknownIBM maximo_asset_management Improper Restriction of XML External Entity ReferencePatch nowKEVEPSS 31.59%Jan 22, 2024
- UnknownIBM api_connect Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 3.23%Feb 14, 2023
- Critical9.8IBM Aspera Faspex Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Feb 13, 2023
- UnknownIBM jazz_reporting_service Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.55%Jan 26, 2022
- UnknownIBM tealeaf_cx Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 29.07%Jan 12, 2022