|
266911
|
8.1 |
HIGH
Network
|
ibm
|
ims_enterprise_suite
|
IBM IMS Enterprise Suite Data Provider before 3.2.0.1 for Microsoft .NET allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.
|
CWE-200 CWE-284
Information Exposure Improper Access Control
|
CVE-2016-2887
|
2024-11-21 11:49 |
2016-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266912
|
8.0 |
HIGH
Network
|
ibm
|
forms_experience_builder
|
Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote authenticated users to hijac…
|
CWE-352
Origin Validation Error
|
CVE-2016-2884
|
2024-11-21 11:49 |
2016-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266913
|
6.5 |
MEDIUM
Network
|
ibm
|
qradar_security_information_and_event_manager
|
IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 and QRadar Incident Forensics 7.2 before 7.2.7 allow remote attackers to bypass intended access restrictions via modified request paramete…
|
CWE-254
7PK - Security Features
|
CVE-2016-2881
|
2024-11-21 11:49 |
2016-12-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266914
|
6.1 |
MEDIUM
Network
|
ibm
|
sterling_b2b_integrator
|
Cross-site scripting (XSS) vulnerability in IBM Sterling B2B Integrator 5.2 before 5020500_14 and 5.2 06 before 5020602_1 allows remote attackers to inject arbitrary web script or HTML via unspecifie…
|
CWE-79
Cross-site Scripting
|
CVE-2016-3057
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266915
|
5.4 |
MEDIUM
Network
|
ibm
|
rational_engineering_lifecycle_manager rational_rhapsody_design_manager rational_quality_manager rational_software_architect_design_manager rational_doors_next_generation rational_team…
|
Cross-site scripting (XSS) vulnerability in IBM Rational Collaborative Lifecycle Management 4.0 before 4.0.7 iFix11 and 5.0 before 5.0.2 iFix17, Rational Quality Manager 4.0 before 4.0.7 iFix11 and 5…
|
CWE-79
Cross-site Scripting
|
CVE-2016-3014
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266916
|
3.5 |
LOW
Network
|
ibm
|
connections
|
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use…
|
CWE-352
Origin Validation Error
|
CVE-2016-3009
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266917
|
4.6 |
MEDIUM
Network
|
ibm
|
connections
|
Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary use…
|
CWE-352
Origin Validation Error
|
CVE-2016-3004
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266918
|
2.1 |
LOW
Physics
|
ibm
|
connections
|
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows physically proximate attackers to obtain sensitive information by reading cached data on a client device.
|
CWE-200
Information Exposure
|
CVE-2016-3002
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266919
|
8.8 |
HIGH
Network
|
ibm
|
bigfix_remote_control
|
Cross-site request forgery (CSRF) vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequence…
|
CWE-352
Origin Validation Error
|
CVE-2016-2963
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266920
|
4.3 |
MEDIUM
Network
|
ibm
|
connections
|
IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to obtain sensitive information by reading an "archaic" e-mail address in a response.
|
CWE-200
Information Exposure
|
CVE-2016-2958
|
2024-11-21 11:49 |
2016-11-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|