Vulnerabilities > IBM

DATE CVE VULNERABILITY TITLE RISK
2023-02-24 CVE-2022-43923 Unspecified vulnerability in IBM Maximo Application Suite 8.8.0/8.9.0
IBM Maximo Application Suite 8.8.0 and 8.9.0 stores potentially sensitive information that could be read by a local user.
local
low complexity
ibm
5.5
2023-02-22 CVE-2022-43578 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm
5.4
2023-02-22 CVE-2022-43870 Unspecified vulnerability in IBM Spectrum Virtualize 8.3.0.0/8.4.0.0/8.5.0.0
IBM Spectrum Virtualize 8.3, 8.4, and 8.5 could disclose SNMPv3 server credentials to an authenticated user in log files.
network
low complexity
ibm
6.5
2023-02-22 CVE-2022-43873 Unspecified vulnerability in IBM Spectrum Virtualize
An authenticated user can exploit a vulnerability in the IBM Spectrum Virtualize 8.2, 8.3, 8.4, and 8.5 GUI to execute code and escalate their privilege on the system.
network
low complexity
ibm
8.8
2023-02-21 CVE-2023-25928 Unspecified vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting.
network
low complexity
ibm
5.4
2023-02-17 CVE-2022-34351 Cleartext Storage of Sensitive Information vulnerability in IBM Qradar Security Information and Event Manager
IBM QRadar SIEM 7.4 and 7.5 is vulnerable to information exposure allowing a non-tenant user with a specific domain security profile assigned to see some data from other domains.
network
low complexity
ibm CWE-312
7.5
2023-02-17 CVE-2022-40231 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized actions due to improper access controls.
network
low complexity
ibm
8.8
2023-02-17 CVE-2022-43579 Unspecified vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting.
network
low complexity
ibm
5.4
2023-02-17 CVE-2023-24960 Unspecified vulnerability in IBM Infosphere Information Server 11.7
IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system.
network
low complexity
ibm
7.5
2023-02-17 CVE-2022-40232 Incorrect Default Permissions vulnerability in IBM Sterling B2B Integrator
IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have access to due to improper permission controls.
network
low complexity
ibm CWE-276
8.8