Vulnerabilities > IBM > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-06-30 | CVE-2023-50954 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 returns sensitive information in URL information that could be used in further attacks against the system. | 5.3 |
| 2024-06-30 | CVE-2024-28798 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. | 6.1 |
| 2024-06-30 | CVE-2024-35119 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in a stack trace. | 5.3 |
| 2024-06-30 | CVE-2024-28795 | Unspecified vulnerability in IBM Infosphere Information Server 11.7 IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. | 5.4 |
| 2024-06-28 | CVE-2024-25031 | Unspecified vulnerability in IBM Storage Defender 2.0.0/2.0.4 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.4 uses an inadequate account lockout setting that could allow an attacker on the network to brute force account credentials. low complexity ibm | 6.5 |
| 2024-06-28 | CVE-2024-25041 | Unspecified vulnerability in IBM Cognos Analytics IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is potentially vulnerable to cross site scripting (XSS). | 5.4 |
| 2024-06-28 | CVE-2024-25053 | Unspecified vulnerability in IBM Cognos Analytics IBM Cognos Analytics 11.2.0, 11.2.1, 11.2.2, 11.2.3, 11.2.4, 12.0.0, 12.0.1, and 12.0.2 is vulnerable to improper certificate validation when using the IBM Planning Analytics Data Source Connection. | 5.9 |
| 2024-06-28 | CVE-2024-35156 | Unspecified vulnerability in IBM MQ IBM MQ 9.3 LTS and 9.3 CD could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 6.5 |
| 2024-06-28 | CVE-2024-35155 | Information Exposure Through an Error Message vulnerability in IBM MQ 9.3.0 IBM MQ Console 9.3 LTS and 9.3 CD could disclose could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. | 6.5 |
| 2024-06-28 | CVE-2024-35137 | Weak Password Requirements vulnerability in IBM Security Access Manager 10.0.0.0/10.0.7.1 IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. | 6.2 |