Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

5.4

MEDIUM

CVE-2016-5981

Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and ScriptSecurityFilter are misconfigured, allows remote att...

Affected Products : filenet_workplace filenet_workplace_xt
EPSS Score: %0.14

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
5.3

MEDIUM

CVE-2016-5968

The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A before 9.0.1.5108 FP5, 9.0.2 before 9.0.2.1223 FP3, and 9.0.2A before 9.0.2.5224 FP3 allows remote ...

Affected Products : tealeaf_customer_experience
EPSS Score: %0.20

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2016-5967

The installation component in IBM Rational Asset Analyzer (RAA) 6.1.0 before FP10 allows local users to discover the WAS Admin password by reading IM native logs....

Affected Products : rational_asset_analyzer
EPSS Score: %0.05

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2016-5955

Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Next Generation 6.0.2 before iFix004 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors....

Affected Products : rational_doors_next_generation
EPSS Score: %0.26

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
10.0

CRITICAL

CVE-2016-5788

General Electric (GE) Bently Nevada 3500/22M USB with firmware before 5.0 and Bently Nevada 3500/22M Serial have open ports, which makes it easier for remote attackers to obtain privileged access via unspecified vectors....

Affected Products : bently_nevada_3500\/22m_usb_firmware bently_nevada_3500\/22m_serial_firmware bently_nevada_3500\/22m_usb bently_nevada_3500\/22m_serial
EPSS Score: %0.30

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
9.1

CRITICAL

CVE-2016-3028

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access....

Affected Products : security_access_manager security_access_manager_for_web
EPSS Score: %0.76

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
8.1

HIGH

CVE-2016-3025

IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach....

Affected Products : security_access_manager security_access_manager_for_mobile
EPSS Score: %0.54

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
8.5

HIGH

CVE-2016-2988

IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 6.4.x before 6.4.3.4 and 7.1.x before 7.1.6 allows remote authenticated users to bypass a TSM credential requirement and obtain ...

Affected Products : tivoli_storage_manager_for_virtual_environments
EPSS Score: %0.33

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2016-2986

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 6.x before 6.0.1 iFix6, Rational Quality Manager 6.x before 6.0.1 iFix6, Rational Team Concert 6.x before 6.0.1 iFix6, Rational DOORS Next Generation 6.x before 6....

Affected Products : rational_doors_next_generation rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_team_concert
EPSS Score: %0.17

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
7.0

HIGH

CVE-2016-2985

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted environment variables to a /usr/lpp/mmfs/bin/ setuid...

Affected Products : spectrum_scale general_parallel_file_system
EPSS Score: %0.04

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
7.0

HIGH

CVE-2016-2984

IBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File System (GPFS) 3.5.x before 3.5.0.32 and 4.1.x before 4.1.1.8 allow local users to gain privileges via crafted command-line parameters to a /usr/lpp/mmfs/bin/ setu...

Affected Products : spectrum_scale general_parallel_file_system
EPSS Score: %0.04

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
4.0

MEDIUM

CVE-2016-2947

IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 4.0 ...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
EPSS Score: %0.18

Published: Nov. 25, 2016

Modified: Apr. 12, 2025
6.5

MEDIUM

CVE-2016-2996

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors....

Affected Products : security_privileged_identity_manager
EPSS Score: %0.15

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2016-2864

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
EPSS Score: %0.17

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-0378

IBM WebSphere Application Server (WAS) Liberty before 16.0.0.3, when the installation lacks a default error page, allows remote attackers to obtain sensitive information by triggering an exception....

Affected Products : websphere_application_server
EPSS Score: %0.34

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-0372

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 be...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
EPSS Score: %0.26

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
4.3

MEDIUM

CVE-2016-0353

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its t...

Affected Products : security_privileged_identity_manager
EPSS Score: %0.21

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
7.5

HIGH

CVE-2016-0325

IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 be...

Affected Products : rational_team_concert
EPSS Score: %0.47

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
5.4

MEDIUM

CVE-2016-0285

Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7...

Affected Products : rational_team_concert
EPSS Score: %0.17

Published: Nov. 24, 2016

Modified: Apr. 12, 2025
5.5

MEDIUM

CVE-2016-0284

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 ...

Affected Products : rational_doors_next_generation rational_collaborative_lifecycle_management rational_engineering_lifecycle_manager rational_quality_manager rational_rhapsody_design_manager rational_software_architect_design_manager rational_team_concert
EPSS Score: %0.33

Published: Nov. 24, 2016

Modified: Apr. 12, 2025

Showing 20 of 292110 Results

Latest CVE Feed

5.4

5.3

5.5

5.4

10.0

9.1

8.1

8.5

5.4

7.0

7.0

4.0

6.5

5.4

4.3

4.3

4.3

7.5

5.4

5.5

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable