IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

13 records in Tivoli Netcool/omnibus Webgui · all components

TI-2021-10514 CVE-2021-29856 · GHSA-j6h9-6xvv-v8ph

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial…

LOW 31

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 could allow an authenticated usre to cause a denial of service through the WebGUI Map Creation page.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.011 Published 2021-09-20 No fix listed

TI-2021-10487 CVE-2021-29821 · GHSA-fgg2-r72r-cjqw

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10486 CVE-2021-29820 · GHSA-7jgh-j4rc-4q2v

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10485 CVE-2021-29819 · GHSA-5cv6-f7pr-xhrj

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10484 CVE-2021-29818 · GHSA-233r-fgcw-c6hw

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10483 CVE-2021-29817 · GHSA-pgx2-pwxj-8wj5

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10475 CVE-2021-29809 · GHSA-7vhx-6x46-jv3p

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10474 CVE-2021-29808 · GHSA-5656-pvjm-rmvr

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10473 CVE-2021-29807 · GHSA-6xph-53h7-ghh2

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10472 CVE-2021-29806 · GHSA-mrpf-h2p4-3gmm

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

LOW 25

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00539 Published 2021-09-20 No fix listed CWE-79

TI-2021-10466 CVE-2021-29800 · GHSA-6qmj-48p6-crf2

Cross-site scripting in IBM Jazz for Service Management

LOW 25

IBM Tivoli Netcool/OMNIbus_GUI and IBM Jazz for Service Management 1.1.3.10 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2021-09-23 No fix listed CWE-79

TI-2021-03624 CVE-2021-20336 · GHSA-q6xf-cxm9-x3wg

Cross-site scripting in IBM Tivoli Netcool/OMNIbus_GUI

LOW 25

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00558 Published 2021-03-11 No fix listed CWE-79

TI-2021-10477 CVE-2021-29811 · GHSA-w223-cx42-24c9

Insufficiently protected credentials in IBM Tivoli Netcool/OMNIbus

LOW 24

IBM Jazz for Service Management and IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 stores user credentials in plain clear text which can be read by an authenticated admin user.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00968 Published 2021-09-20 No fix listed CWE-522

Open these records in search →