Security Intel Hub 160+

IBM Sterling B2B Integrator Improper Access Control Vulnerability (CVE-2022-40231)

IBM Jazz Reporting Service Information Disclosure Vulnerability (CVE-2018-1639)

IBM Db2 Information Disclosure Vulnerability (CVE-2022-43930) Advisory

IBM Sterling B2B Integrator XSS Vulnerability Advisory (CVE-2025-36135)

IBM Db2 Improper Resource Shutdown DoS Vulnerability (CVE-2025-36006)

IBM Business Automation Workflow XSS Vulnerability Advisory (CVE-2025-36054)

IBM Jazz Foundation XSS Vulnerability (CVE-2018-1762) Advisory and Fix

IBM Maximo Asset Management CVE-2017-1208 XSS Vulnerability Advisory and Fix

IBM Spectrum Protect Local Privilege Escalation via Insecure Directory Permissions (CVE-2021-20532)

## Critical Vulnerability Information - **CVE ID:** CVE-2021-20532 - **Description:** IBM Spectrum Protect Client may allow a local user to escalate privileges and fully control the system due to inse…

IBM BPM Process Admin Console Persistent XSS Vulnerability (CVE-2017-1530)

## Critical Vulnerability Information - **CVE ID**: CVE-2017-1530 - **Summary**: A persistent Cross-Site Scripting (XSS) vulnerability exists in the IBM Business Process Manager (BPM) Process Admin Co…

IBM Case Manager & Business Automation Workflow XSS Vulnerability (CVE-2020-4768)

### Critical Vulnerability Information - **CVE ID:** CVE-2020-4768 - **Description:** IBM Case Manager and IBM Business Automation Workflow may be vulnerable to cross-site scripting (XSS) attacks. Thi…

IBM SDK Java Security Bulletin: 9 CVEs including RCE and Info Disclosure

## Critical Vulnerability Information ### Vulnerability Overview - **Total Vulnerabilities**: 9 - **Affected Product**: IBM® SDK, Java™ Technology Edition ### Vulnerability Details 1. **CVE-2018-11212…

IBM Jazz Reporting Service LQE XSS Vulnerability Advisory (CVE-2018-1918)

# Security Bulletin: Security Vulnerability in Lifecycle Query Engine (LQE) Affecting Security Provided by Jazz Reporting Service (CVE-2018-1918) ## Summary A security vulnerability exists in the Life…

IBM Tivoli Netcool/OMNibus GUI XSS Vulnerability Advisory (CVE-2020-4196)

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2020-4196 - **Description**: IBM Tivoli Netcool/OMNibus GUI is affected by a Cross-Site Scripting (XSS) vulnerabili…

IBM MQ CVE-2017-1236 Authenticated DoS Vulnerability

- **CVE ID**: CVE-2017-1236 - **Description**: An authenticated user could cause a denial of service by issuing an incorrect saved channel status inquiry. - **CVSS Base Score**: 3.1 - **Affected Produ…

IBM DataPower Gateway HSTS Misconfiguration Leads to MITM (CVE-2018-1663)

### Vulnerability Information Summary - **CVE ID**: CVE-2018-1663 - **Vulnerability Description**: Due to improper enforcement of HTTP Strict Transport Security (HSTS), IBM DataPower Gateway allows re…

IBM Security Key Lifecycle Manager Multiple Vulnerabilities Advisory (CVE-2020-4567)

# IBM Security Key Lifecycle Manager Vulnerabilities ## Summary Multiple vulnerabilities identified in IBM Security Key Lifecycle Manager have been fixed in version v4.0.0.2 and v3.0.1.5. Users should…

IBM Tivoli Workload Scheduler Local Privilege Escalation (CVE-2019-4031)

- **CVE ID:** CVE-2019-4031 - **Description:** IBM Tivoli Workload Scheduler contains a vulnerability allowing a local user to launch the taskLauncher program and escalate privileges by writing files …