Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2018-07-06 CVE-2018-1542 XXE vulnerability in IBM Content Foundation and Filenet Content Manager
IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.
network
low complexity
ibm CWE-611
7.1
2018-07-06 CVE-2018-1494 Cross-site Scripting vulnerability in IBM Rational Doors Next Generation
IBM DOORS Next Generation (DNG/RRC) 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2018-07-06 CVE-2017-1795 Information Exposure Through Log Files vulnerability in IBM Websphere MQ Managed File Transfer
IBM WebSphere MQ 7.5, 8.0, and 9.0 through 9.0.4 could allow a local user to obtain highly sensitive information via trace logs in IBM WebSphere MQ Managed File Transfer.
local
low complexity
ibm CWE-532
4.4
2018-07-06 CVE-2017-1559 Information Exposure vulnerability in IBM products
Multiple IBM Rational products could disclose sensitive information by an attacker that intercepts vulnerable requests.
network
low complexity
ibm CWE-200
4.3
2018-07-06 CVE-2017-1509 Information Exposure vulnerability in IBM products
IBM Jazz Foundation products could allow an authenticated user to obtain sensitive information from a stack trace that could be used to aid future attacks.
network
low complexity
ibm CWE-200
4.3
2018-07-06 CVE-2017-1488 Information Exposure vulnerability in IBM products
An undisclosed vulnerability in Jazz common products exists with potential for information disclosure.
network
low complexity
ibm CWE-200
5.3
2018-07-06 CVE-2017-1329 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1248 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
6.1
2018-07-06 CVE-2017-1242 Code Injection vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 are vulnerable to HTML injection.
network
low complexity
ibm CWE-94
5.4
2018-07-06 CVE-2017-1239 Information Exposure vulnerability in IBM products
IBM Quality Manager (RQM) 5.0.x and 6.0 through 6.0.5 could reveal sensitive information in HTTP 500 Internal Server Error responses.
network
low complexity
ibm CWE-200
5.3