Latest CVE Feed
-
4.3
MEDIUMCVE-2021-29776
IBM QRadar SIEM 7.3, 7.4, and 7.5 could allow an authenticated user to obtain sensitive information from another user's dashboard providing the dashboard ID of that user. IBM X-Force ID: 203030.... Read more
- EPSS Score: %0.18
- Published: Apr. 27, 2022
- Modified: Nov. 21, 2024
-
6.4
MEDIUMCVE-2021-29775
IBM Business Automation Workflow 19.0.03 and 20.0 and IBM Cloud Pak for Automation 20.0.3-IF002 and 21.0.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended ... Read more
- EPSS Score: %0.16
- Published: Jun. 28, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-29774
IBM Jazz Team Server products could allow an authenticated user to obtain elevated privileges under certain configurations. IBM X-Force ID: 203025.... Read more
- EPSS Score: %0.27
- Published: Oct. 27, 2021
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2021-29773
IBM Security Guardium 10.6 and 11.3 could allow a remote authenticated attacker to obtain sensitive information or modify user details caused by an insecure direct object vulnerability (IDOR). IBM X-Force ID: 202865.... Read more
- EPSS Score: %0.09
- Published: Sep. 15, 2021
- Modified: Nov. 21, 2024
-
9.8
CRITICALCVE-2021-29772
IBM API Connect 5.0.0.0 through 5.0.8.11 could allow a user to potentially inject code due to unsanitized user input. IBM X-Force ID: 202774.... Read more
Affected Products : api_connect- EPSS Score: %0.25
- Published: Aug. 26, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-29771
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a ... Read more
- EPSS Score: %0.22
- Published: Nov. 02, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-29770
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 202771.... Read more
- EPSS Score: %0.13
- Published: Jul. 26, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-29769
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this... Read more
- EPSS Score: %0.08
- Published: Jul. 26, 2021
- Modified: Nov. 21, 2024
-
6.5
MEDIUMCVE-2021-29768
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a low level user to obtain sensitive information from the details of the 'Cloud Storage' page for which they should not have access. IBM X-Force ID: 202682.... Read more
- EPSS Score: %0.43
- Published: Jun. 24, 2022
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-29767
IBM i2 Analyst's Notebook Premium 9.2.0, 9.2.1, and 9.2.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the syste... Read more
- EPSS Score: %0.18
- Published: Jul. 26, 2021
- Modified: Nov. 21, 2024
-
5.3
MEDIUMCVE-2021-29766
IBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks ... Read more
- EPSS Score: %0.18
- Published: Jul. 26, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-29765
IBM PowerVM Hypervisor FW940 and FW950 could allow an attacker to obtain sensitive information if they gain service access to the FSP. IBM X-Force ID: 202476.... Read more
- EPSS Score: %0.21
- Published: Aug. 04, 2021
- Modified: Nov. 21, 2024
-
6.4
MEDIUMCVE-2021-29764
IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials ... Read more
Affected Products : sterling_b2b_integrator- EPSS Score: %0.20
- Published: Oct. 06, 2021
- Modified: Nov. 21, 2024
-
5.1
MEDIUMCVE-2021-29763
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 under very specific conditions, could allow a local user to keep running a procedure that could cause the system to run out of memory.and cause a denial of service. IBM X-Forc... Read more
- EPSS Score: %0.06
- Published: Sep. 16, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-29761
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from the dashboard that they should not have access to. IBM X-Force ID: 202265.... Read more
Affected Products : sterling_b2b_integrator- EPSS Score: %0.12
- Published: Oct. 06, 2021
- Modified: Nov. 21, 2024
-
5.4
MEDIUMCVE-2021-29760
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to download unauthorized files through the dashboard user interface. IBM X-Force ID: 202213.... Read more
Affected Products : sterling_b2b_integrator- EPSS Score: %0.12
- Published: Oct. 06, 2021
- Modified: Nov. 21, 2024
-
4.4
MEDIUMCVE-2021-29759
IBM App Connect Enterprise Certified Container 1.0, 1.1, 1.2, and 1.3 could allow a privileged user to obtain sensitive information from internal log files. IBM X-Force ID: 202212.... Read more
Affected Products : app_connect_enterprise_certified_container- EPSS Score: %0.04
- Published: Jul. 07, 2021
- Modified: Nov. 21, 2024
-
4.3
MEDIUMCVE-2021-29758
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to perform actions that they should not be able to access due to improper access controls. IBM X-Force ID: 202169.... Read more
Affected Products : sterling_b2b_integrator- EPSS Score: %0.13
- Published: Oct. 06, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29757
IBM QRadar User Behavior Analytics 4.1.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202168.... Read more
Affected Products : qradar_user_behavior_analytics- EPSS Score: %0.11
- Published: Aug. 02, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-29756
IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202... Read more
- EPSS Score: %0.16
- Published: Dec. 03, 2021
- Modified: Nov. 21, 2024