Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2022-41735MEDIUMIBM Business Process Manager cross-site scriptingEPSS 0.4%CVE-2026-15955HIGHIBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file pathsEPSS 0.4%CVE-2022-40750MEDIUMIBM WebSphere Application Server cross-site scriptingEPSS 0.4%CVE-2023-50310MEDIUMIBM CICS Transaction Gateway for Multiplatforms information disclosureEPSS 0.4%CVE-2022-38390MEDIUMMultiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrarEPSS 0.4%CVE-2026-12947HIGHIBM App Connect Enterprise is vulnerable to Confidentiality disclosure on Discovery Connector nodesEPSS 0.4%CVE-2022-41738HIGHIBM Spectrum Scale security bypassEPSS 0.4%CVE-2025-25032HIGHIBM Cognos Analytics denial of serviceEPSS 0.4%CVE-2022-22453MEDIUMIBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly EPSS 0.4%CVE-2025-36124MEDIUMIBM WebSphere Application Server Liberty bypass securityEPSS 0.4%CVE-2026-17616MEDIUMSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.4%CVE-2026-19303HIGHLangflow is vulnerable to arbitrary file write and arbitrary file deletion due to unvalidated paths in file-processing componentsEPSS 0.4%CVE-2025-36098MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2023-22860MEDIUMIBM Cloud Pak for Business Automation cross-site scriptingEPSS 0.4%CVE-2026-81265HIGHLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetchesEPSS 0.4%CVE-2025-2668MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2026-8862HIGHVulnerabilities exists in IBM Netezza SoftwareEPSS 0.4%CVE-2025-36001MEDIUMIBM Db2 Denial of ServiceEPSS 0.4%CVE-2024-22326MEDIUMIBM System Storage improper authenticationEPSS 0.4%CVE-2017-1469—IBM InfoSphere Information Server 9.1, 11.3, and 11.5 could allow a local user to gain elevated privileges by placing arbitrary files in insEPSS 0.4%