Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2026-17076MEDIUMIBM i is Affected By Multiple Vulnerabilities in DRDA / DDMEPSS 0.5%CVE-2026-17078MEDIUMIBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []EPSS 0.5%CVE-2023-23476LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2026-9338MEDIUMIBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesEPSS 0.5%CVE-2023-38733MEDIUMIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2026-17216MEDIUMIBM i is Affected By Multiple Vulnerabilities in DRDA / DDMEPSS 0.5%CVE-2026-7870HIGHIBM i is Affected by Privilege Escalation []EPSS 0.5%CVE-2026-17077MEDIUMIBM i is Affected By Multiple Vulnerabilities in DRDA / DDMEPSS 0.5%CVE-2026-17212MEDIUMIBM i is Affected By Multiple Vulnerabilities in NetServerEPSS 0.5%CVE-2025-36236HIGHAIX Path TraversalEPSS 0.5%CVE-2024-40697HIGHIBM Common Licensing information disclosureEPSS 0.5%CVE-2026-8446HIGHLangflow is affected by security vulnerabilities in Model Context Protocol featuresEPSS 0.5%CVE-2024-22344MEDIUMIBM TXSeries for Multiplatforms information disclosureEPSS 0.5%CVE-2026-81213HIGHLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesEPSS 0.5%CVE-2019-4427MEDIUMIBM Cloud CLI 0.6.0 through 0.16.1 windows installers are signed using SHA1 certificate. An attacker might be able to exploit the weak algorEPSS 0.5%CVE-2024-45642MEDIUMIBM Security ReaQta information disclosureEPSS 0.5%CVE-2022-41296MEDIUMIBM Db2U cross-site respect forgeryEPSS 0.5%CVE-2023-38263MEDIUMIBM SOAR QRadar Plugin App improper access controlsEPSS 0.5%CVE-2023-38718LOWIBM Robotic Process Automation information disclosureEPSS 0.5%CVE-2021-20524MEDIUMIBM Security Verify Access Docker 10.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScripEPSS 0.5%