Vulnerabilities > IBM > Low

DATE CVE VULNERABILITY TITLE RISK
2017-06-23 CVE-2017-1349 Information Exposure vulnerability in IBM Sterling B2B Integrator 5.2
IBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from HTTP sessions that could be read by a local user.
local
low complexity
ibm CWE-200
2.1
2017-06-22 CVE-2016-9747 Cross-site Scripting vulnerability in IBM products
IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-22 CVE-2016-9983 Information Exposure vulnerability in IBM Sterling B2B Integrator 5.2
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should not have access to.
network
ibm CWE-200
3.5
2017-06-21 CVE-2017-1117 Denial of Service vulnerability in IBM WebSphere MQ
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled.
network
ibm
3.5
2017-06-13 CVE-2016-9973 Cross-site Scripting vulnerability in IBM products
IBM Jazz Foundation is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-13 CVE-2017-1100 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-13 CVE-2017-1101 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-13 CVE-2017-1102 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-13 CVE-2017-1104 Cross-site Scripting vulnerability in IBM Rational Quality Manager
IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-06-12 CVE-2017-1214 Information Exposure vulnerability in IBM Inotes
IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure.
network
ibm CWE-200
3.5