Vulnerabilities > IBM > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-03-14 CVE-2021-39055 Cross-site Scripting vulnerability in IBM Spectrum Copy Data Management
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4
2022-03-14 CVE-2022-22344 Injection vulnerability in IBM Spectrum Copy Data Management
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.
network
low complexity
ibm CWE-74
6.1
2022-03-14 CVE-2022-22353 Unspecified vulnerability in IBM BIG SQL 7.1.0/7.1.1/7.2.3
IBM Big SQL on IBM Cloud Pak for Data 7.1.0, 7.1.1, 7.2.0, and 7.2.3 could allow an authenticated user with appropriate permissions to obtain sensitive information by bypassing data masking rules using a CREATE TABLE SELECT statement.
network
low complexity
ibm
6.5
2022-03-10 CVE-2021-38910 Improper Input Validation vulnerability in IBM Datapower Gateway
IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input.
network
low complexity
ibm CWE-20
5.3
2022-03-10 CVE-2021-39025 Unspecified vulnerability in IBM Guardium Data Encryption 4.0.0.0/5.0.0.0
IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web backend is down.
network
low complexity
ibm
5.3
2022-03-07 CVE-2021-38988 Unspecified vulnerability in IBM AIX and Vios
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.
local
low complexity
ibm
5.5
2022-03-07 CVE-2021-38989 Unspecified vulnerability in IBM AIX and Vios
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.
local
low complexity
ibm
5.5
2022-03-02 CVE-2021-38996 Unspecified vulnerability in IBM AIX and Vios
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the AIX kernel to cause a denial of service.
local
low complexity
ibm
5.5
2022-03-02 CVE-2022-22350 Unspecified vulnerability in IBM AIX and Vios
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in CAA to cause a denial of service.
local
low complexity
ibm
5.5
2022-03-01 CVE-2020-4925 Unspecified vulnerability in IBM Spectrum Scale 5.0.0/5.1.0
A security vulnerability in the Spectrum Scale 5.0 and 5.1 allows a non-root user to overflow the mmfsd daemon with requests and preventing the daemon to service other requests.
local
low complexity
ibm
5.5