Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2019-4094HIGHIBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrustedEPSS 0.4%CVE-2026-10547MEDIUMLangflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcementEPSS 0.4%CVE-2026-11725HIGHIBM MQ queue manager is vulnerable to privilege escalationEPSS 0.4%CVE-2026-16958MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.4%CVE-2026-17255MEDIUMIBM i is Affected By Denial of Service Vulnerability []EPSS 0.4%CVE-2023-22868MEDIUMIBM Aspera Faspex cross-site scriptingEPSS 0.4%CVE-2025-0154MEDIUMIBM TXSeries for Multiplatforms information disclosureEPSS 0.4%CVE-2018-1957MEDIUMIBM WebSphere Application Server 9 could allow sensitive information to be available caused by mishandling of data by the application based EPSS 0.4%CVE-2024-51461MEDIUMIBM QRadar WinCollect Agent denial of serviceEPSS 0.4%CVE-2022-22461MEDIUMIBM Security Verify Governance, Identity Manager information disclosure EPSS 0.4%CVE-2023-30444HIGHIBM Watson Machine Learning on Cloud Pak for Data server-side request forgeryEPSS 0.4%CVE-2025-33077HIGHIBM Engineering Systems Design Rhapsody code executionEPSS 0.4%CVE-2019-4736MEDIUMIBM Financial Transaction Manager 3.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unaEPSS 0.4%CVE-2025-36366MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2022-39160MEDIUMIBM Cognos Analytics cross-site scriptingEPSS 0.4%CVE-2025-14917MEDIUMIBM WebSphere Application Server Liberty could provide weaker than expected securityEPSS 0.4%CVE-2024-47106MEDIUMIBM Jazz for Service Management information disclosureEPSS 0.4%CVE-2020-4170MEDIUMIBM Security Guardium Insights 2.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauEPSS 0.4%CVE-2020-4764MEDIUMIBM Planning Analytics 2.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized aEPSS 0.4%CVE-2019-4095MEDIUMIBM Cloud Pak System 2.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actEPSS 0.4%