Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2017-07-31 CVE-2016-9719 Improper Input Validation vulnerability in IBM Infosphere Master Data Management Server
IBM InfoSphere Master Data Management Server 10.1.
network
low complexity
ibm CWE-20
5.7
2017-07-31 CVE-2016-9718 Cross-site Scripting vulnerability in IBM Infosphere Master Data Management Server
IBM InfoSphere Master Data Management Server 10.1.
network
low complexity
ibm CWE-79
5.4
2017-07-31 CVE-2016-9717 Improper Input Validation vulnerability in IBM Infosphere Master Data Management Server
HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1.
network
low complexity
ibm CWE-20
6.5
2017-07-31 CVE-2016-9716 Cross-Site Request Forgery (CSRF) vulnerability in IBM Infosphere Master Data Management Server
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
network
low complexity
ibm CWE-352
8.8
2017-07-31 CVE-2016-9715 Cross-site Scripting vulnerability in IBM Infosphere Master Data Management Server
IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-07-31 CVE-2016-9714 Cross-Site Request Forgery (CSRF) vulnerability in IBM Infosphere Master Data Management Server
IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
network
low complexity
ibm CWE-352
8.8
2017-07-24 CVE-2017-1382 Incorrect Default Permissions vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default permissions instead of the customized permissions when custom startup scripts are used.
local
low complexity
ibm CWE-276
7.1
2017-07-24 CVE-2017-1380 Cross-site Scripting vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2017-07-24 CVE-2017-1287 Open Redirect vulnerability in IBM Rhapsody Design Manager
IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.
network
low complexity
ibm CWE-601
5.4
2017-07-24 CVE-2017-1249 Cross-site Scripting vulnerability in IBM Rhapsody Design Manager
IBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4