Vulnerabilities > IBM > Low

DATE CVE VULNERABILITY TITLE RISK
2017-05-22 CVE-2017-1282 Cross-site Scripting vulnerability in IBM Content Navigator
IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-22 CVE-2017-1320 Cross-site Scripting vulnerability in IBM Tivoli Federated Identity Manager
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-10 CVE-2016-3032 Cross-site Scripting vulnerability in IBM Cognos Analytics
IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-10 CVE-2016-5888 Cross-site Scripting vulnerability in IBM Interact
IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-10 CVE-2016-6035 Cross-site Scripting vulnerability in IBM Rational Quality Manager and Rational Team Concert
IBM Rational Quality Manager is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-05-10 CVE-2016-6037 Cross-site Scripting vulnerability in IBM Rational Quality Manager and Rational Team Concert
IBM Rational Team Concert (RTC) is vulnerable to HTML injection.
network
ibm CWE-79
3.5
2017-05-05 CVE-2016-8916 Information Exposure vulnerability in IBM Tivoli Storage Manager
IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued.
local
low complexity
ibm CWE-200
2.1
2017-05-03 CVE-2016-0382 Information Exposure vulnerability in IBM Tealeaf Consumer Experience
The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS.
local
low complexity
ibm CWE-200
2.1
2017-04-20 CVE-2016-9979 Cross-site Scripting vulnerability in IBM Curam Social Program Management
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5
2017-04-20 CVE-2016-9980 Cross-site Scripting vulnerability in IBM Curam Social Program Management
IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting.
network
ibm CWE-79
3.5