|
219211
|
9.8 |
CRITICAL
Network
|
ibm
|
emptoris_spend_analysis emptoris_contract_management
|
IBM Contract Management 10.1.0 through 10.1.3 and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, whic…
|
CWE-89
SQL Injection
|
CVE-2019-4481
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219212
|
7.5 |
HIGH
Network
|
ibm
|
api_connect
|
IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot do…
|
CWE-22
Path Traversal
|
CVE-2019-4460
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219213
|
8.2 |
HIGH
Network
|
ibm
|
infosphere_global_name_management infosphere_identity_insight
|
IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote att…
|
CWE-611
XXE
|
CVE-2019-4433
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219214
|
5.7 |
MEDIUM
Network
|
ibm
|
business_process_manager business_automation_workflow
|
IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, and 18.0.0.2 could allow a user to obtain highly sensitive information from another user by inserting links that would be clicked on by unsuspecti…
|
NVD-CWE-noinfo
|
CVE-2019-4425
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219215
|
6.2 |
MEDIUM
Local
|
ibm
|
intelligent_operations_center intelligent_operations_center_for_emergency_management water_operations_for_waternamics
|
IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system. IBM X-Force ID: 1…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-4420
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219216
|
8.2 |
HIGH
Network
|
ibm
|
intelligent_operations_center intelligent_operations_center_for_emergency_management water_operations_for_waternamics
|
IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to …
|
CWE-611
XXE
|
CVE-2019-4419
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219217
|
7.5 |
HIGH
Network
|
ibm
|
api_connect
|
IBM API Connect 2018.1 through 2018.4.1.6 developer portal could allow an unauthorized user to cause a denial of service via an unprotected API. IBM X-Force ID: 162263.
|
NVD-CWE-noinfo
|
CVE-2019-4402
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219218
|
7.5 |
HIGH
Network
|
ibm
|
security_guardium_big_data_intelligence
|
IBM Security Guardium Big Data Intelligence 4.0 (SonarG) uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 161036.
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2019-4310
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219219
|
4.3 |
MEDIUM
Network
|
ibm
|
emptoris_sourcing emptoris_spend_analysis emptoris_contract_management
|
IBM Emptoris Sourcing 10.1.0 through 10.1.3, IBM Contract Management 10.1.0 through 10.1.3, and IBM Emptoris Spend Analysis 10.1.0 through 10.1.3 could allow an authenticated user to obtain sensitive…
|
CWE-209
Information Exposure Through an Error Message
|
CVE-2019-4308
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219220
|
7.8 |
HIGH
Local
|
ibm
|
mq_appliance datapower_gateway
|
IBM DataPower Gateway 2018.4.1.0 through 2018.4.1.6, 7.6.0.0 through 7.6.0.15 and IBM MQ Appliance 8.0.0.0 through 8.0.0.12, 9.1.0.0 through 9.1.0.2, and 9.1.1 through 9.1.2 could allow a local attac…
|
CWE-78
OS Command
|
CVE-2019-4294
|
2024-11-21 13:43 |
2019-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|