IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
IBM
Information Disclosure
Security Guardium
NVD
CVSS 3.0
3.7
EPSS
0.2%
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
IBM
Information Disclosure
Maximo Asset Management
NVD
CVSS 3.0
3.3
EPSS
0.1%
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting. Rated low severity (CVSS 2.5). No vendor patch available.
IBM
Information Disclosure
Websphere Message Broker
Integration Bus
NVD
CVSS 3.0
2.5
EPSS
0.1%