Vulnerabilities > IBM > Low

DATE CVE VULNERABILITY TITLE RISK
2017-12-13 CVE-2017-1546 Cross-site Scripting vulnerability in IBM products
IBM DOORS Next Generation (DNG/RRC) 4.07, 5.0, and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-12-13 CVE-2017-1716 Incorrect Permission Assignment for Critical Resource vulnerability in IBM Tivoli Workload Scheduler 8.6/9.1/9.2
IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings.
local
low complexity
ibm CWE-732
2.1
2017-12-11 CVE-2017-1536 Cross-site Scripting vulnerability in IBM Websphere Portal
IBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-12-11 CVE-2017-1549 Cross-site Scripting vulnerability in IBM Sterling File Gateway 2.2
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-12-11 CVE-2017-1632 Cross-site Scripting vulnerability in IBM Sterling File Gateway 2.2
IBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-12-11 CVE-2017-1683 Cross-site Scripting vulnerability in IBM Connections Engagement Center 6.0
IBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-12-11 CVE-2017-1760 Unspecified vulnerability in IBM Websphere MQ
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent thread and expose some sensitive information.
local
low complexity
ibm
3.6
2017-12-07 CVE-2017-1336 Code Injection vulnerability in IBM Infosphere Biginsights 4.2.0
IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files.
network
high complexity
ibm CWE-94
3.6
2017-12-07 CVE-2017-1353 Information Exposure vulnerability in IBM Atlas Ediscovery Process Management
IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links.
network
ibm CWE-200
3.5
2017-12-07 CVE-2017-1354 Cross-site Scripting vulnerability in IBM Atlas Ediscovery Process Management
IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5