Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow an attacker to obtain sensitive user information using an expir…EPSS 0.2%Mar 13, 2026
- High7.5IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 could allow a remote attacker to obtain sensitive information in cleartext…EPSS 0.2%Mar 13, 2026
- Medium5.4IBM Sterling Partner Engagement Manager 6.2.3.0 through 6.2.3.5 and 6.2.4.0 through 6.2.4.2 is vulnerable to cross-site scripting.EPSS 0.2%Mar 13, 2026
- Medium5.4IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, and 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1 are vulnerable to cross-s…EPSS 0.2%Mar 13, 2026
- Medium5.4IBM Aspera Orchestrator 3.0.0 through 4.1.2 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.EPSS 0.2%Mar 10, 2026
- High7.8IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL uncontrolled searc…Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.EPSS 0.2%Mar 10, 2026
- Medium5.4IBM Aspera Faspex 5 5.0.0 through 5.0.14.3 is vulnerable to cross-site scripting.EPSS 0.2%Mar 10, 2026
- High7.5IBM Aspera Orchestrator 3.0.0 through 4.1.2 stores sensitive information in URL parameters.EPSS 0.3%Mar 10, 2026
- Medium6.1Affected Product(s)Version(s)InfoSphere Data Architect9.2.1EPSS 0.2%Mar 10, 2026
- Medium4.4IBM Planning Analytics Advanced Certified Containers 3.1.0 through 3.1.4 could allow a local privileged user to obtain sensitive information from environment variables.EPSS 0.1%Mar 10, 2026
- Medium5.0IBM MQ 9.1.0.0 through 9.1.0.33 LTS, 9.2.0.0 through 9.2.0.40 LTS, 9.3.0.0 through 9.3.0.36 LTS, 9.30.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.17 LTS, and 9.4.0.0 t…EPSS 0.1%Mar 3, 2026
- High7.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 An XML External Entity (XXE) vulnerability in IBM InfoSphere Information Server could allow attackers to re…EPSS 0.3%Mar 3, 2026
- High7.5IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informationEPSS 0.2%Mar 3, 2026
- Medium5.9IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1EPSS 0.2%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due t…EPSS 0.4%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due t…EPSS 0.4%Mar 3, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.1.2 through 5.3.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due t…EPSS 0.4%Mar 3, 2026
- Medium6.5IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to properly validate…Mar 3, 2026
- Medium5.3IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file.EPSS 0.2%Mar 3, 2026
- Low3.3IBM DevOps Plan 3.0.0 through 3.0.5 allows web page cache to be stored locally which can be read by another user on the system.EPSS 0.1%Mar 3, 2026
- High7.5IBM DevOps Plan 3.0.0 through 3.0.5 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.EPSS 0.3%Mar 3, 2026
- Critical9.8IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected security when using th…EPSS 0.2%Mar 3, 2026
- High7.8IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additi…EPSS 0.1%Mar 3, 2026
- Medium5.4IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.EPSS 0.1%Mar 3, 2026