| CVE-2023-23470 |
IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in…
|
6.4
Medium
|
May 4, 2023 |
| CVE-2022-40746 |
IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to…
|
7.2
High
|
Nov 21, 2022 |
| CVE-2022-34358 |
IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting
|
5.4
Medium
|
Jul 13, 2022 |
| CVE-2022-22495 |
IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection
|
6.3
Medium
|
May 24, 2022 |
| CVE-2022-22481 |
IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web…
|
3.7
Low
|
May 9, 2022 |
| CVE-2021-39056 |
The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user…
|
6.5
Medium
|
Jan 13, 2022 |
| CVE-2021-38876 |
IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting
|
6.1
Medium
|
Dec 30, 2021 |
| CVE-2021-20501 |
IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to…
|
5.9
Medium
|
Apr 21, 2021 |
| CVE-2020-4345 |
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local…
|
2.9
Low
|
May 17, 2020 |
| CVE-2019-4450 |
IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting
|
6.1
Medium
|
Nov 9, 2019 |
| CVE-2019-4536 |
IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror…
|
6.7
Medium
|
Aug 29, 2019 |
| CVE-2019-4381 |
IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node…
|
5.9
Medium
|
Jun 14, 2019 |
| CVE-2019-4040 |
IBM I 7.2 and 7.3 is vulnerable to cross-site scripting
|
6.1
Medium
|
Jan 31, 2019 |
| CVE-2017-1460 |
IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin
|
Not rated
|
Jul 31, 2017 |