Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2023-23470MEDIUMIBM i privilege escalationEPSS 0.5%CVE-2024-28778MEDIUMIBM Cognos Controller information disclosureEPSS 0.5%CVE-2023-28522MEDIUMIBM API Connect improper access controlEPSS 0.5%CVE-2026-3627CRITICALMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.5%CVE-2022-22317MEDIUMIBM Curam Social Program Management 8.0.0 and 8.0.1 does not invalidate session after logout which could allow an authenticated user to impeEPSS 0.5%CVE-2021-29769LOWIBM i2 Analyst's Notebook Premium (IBM i2 Analyze 4.3.0, 4.3.1, and 4.3.2) does not set the secure attribute on authorization tokens or sessEPSS 0.5%CVE-2024-35124HIGHIBM OpenBMC authentication bypassEPSS 0.5%CVE-2022-34319MEDIUMIBM CICS TX information disclosureEPSS 0.5%CVE-2023-33846MEDIUMIBM CICS TX cross-site scriptingEPSS 0.5%CVE-2026-13772HIGHIBM WebSphere eXtreme Scale's OQL is affected by remote code executionEPSS 0.5%CVE-2021-39026MEDIUMIBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure EPSS 0.5%CVE-2025-36064MEDIUMIBM Sterling Connect:Express for Microsoft Windows information disclosureEPSS 0.5%CVE-2023-35900MEDIUMIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2024-56477MEDIUMIBM Power Hardware Management Console directory traversalEPSS 0.5%CVE-2026-17485HIGHIBM i is Affected By Denial of Service Vulnerability []EPSS 0.5%CVE-2018-1936HIGHIBM DB2 9.7, 10.1, 10.5, and 11.1 libdb2e.so.1 is vulnerable to a stack based buffer overflow, caused by improper bounds checking which coulEPSS 0.5%CVE-2019-4014HIGHIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 is vulnerable to a buffer overflow, which could EPSS 0.5%CVE-2026-7658MEDIUMLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementEPSS 0.5%CVE-2022-32756LOWIBM Security Verify Directory information disclosureEPSS 0.5%CVE-2024-55913MEDIUMIBM Concert Software path traversalEPSS 0.5%