Vulnerabilities > IBM > Low

DATE CVE VULNERABILITY TITLE RISK
2017-10-24 CVE-2017-1211 Information Exposure vulnerability in IBM Daeja Viewone
IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled.
local
high complexity
ibm CWE-200
2.5
2017-09-25 CVE-2017-1346 Race Condition vulnerability in IBM Business Process Manager
IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan.
local
high complexity
ibm CWE-362
2.5
2017-09-12 CVE-2017-1520 Improper Authentication vulnerability in IBM DB2 and DB2 Connect
IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT.
network
high complexity
ibm CWE-287
3.7
2017-08-29 CVE-2016-2974 Information Exposure vulnerability in IBM Sametime
IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as other users on the local machine of the user.
local
low complexity
ibm CWE-200
3.3
2017-08-29 CVE-2016-2978 Information Exposure vulnerability in IBM Sametime
IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user.
local
low complexity
ibm CWE-200
3.3
2017-08-22 CVE-2017-1422 Information Exposure vulnerability in IBM Maas360 DTM 3.81
IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information.
local
low complexity
ibm CWE-200
3.3
2017-07-21 CVE-2017-1381 Information Exposure vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data being cached and then served.
local
low complexity
ibm CWE-200
3.3
2017-07-05 CVE-2017-1144 Untrusted Search Path vulnerability in IBM Integration BUS and Websphere Message Broker
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting.
local
high complexity
ibm CWE-426
2.5
2017-07-05 CVE-2017-1176 Information Exposure vulnerability in IBM Maximo Asset Management
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments.
local
low complexity
ibm CWE-200
3.3
2017-07-05 CVE-2016-0238 Information Exposure vulnerability in IBM Security Guardium
IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request.
network
high complexity
ibm CWE-200
3.7