Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2025-36328MEDIUMError Message Containing Sensitive Information found in Watson Data IntelligenceEPSS 0.4%CVE-2026-18068MEDIUMIBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets ExtensionEPSS 0.4%CVE-2026-18849MEDIUMIBM OpenBMC Code ExecutionEPSS 0.4%CVE-2026-3621HIGHIBM WebSphere Application Server Liberty is affected by identity spoofingEPSS 0.4%CVE-2026-7868MEDIUMThis Power System update is being released to address incorrect authorizationEPSS 0.4%CVE-2021-29742HIGHIBM Security Verify Access Docker 10.0.0 could allow a user to impersonate another user on the system. IBM X-Force ID: 201483.EPSS 0.4%CVE-2023-35018LOWIBM Security Verify Governance file uploadEPSS 0.4%CVE-2024-45659MEDIUMIBM Security Verify Access information disclosureEPSS 0.4%CVE-2020-4799HIGHIBM Informix spatial 14.10 could allow a local user to execute commands as a privileged user due to an out of bounds write vulnerability. IBEPSS 0.4%CVE-2022-35646MEDIUMIBM Security Verify Governance, Identity Manager security bypassEPSS 0.4%CVE-2026-18828MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.4%CVE-2023-43052MEDIUMIBM Control Center external service interactionEPSS 0.4%CVE-2019-4265LOWIBM Maximo Anywhere 7.6.0, 7.6.1, 7.6.2, and 7.6.3 does not have device root detection which could result in an attacker gaining sensitive iEPSS 0.4%CVE-2021-20450MEDIUMIBM Cognos Controller information disclosureEPSS 0.4%CVE-2024-39736MEDIUMIBM Datacap Navigator HTTP HOST header injectionEPSS 0.4%CVE-2022-34362MEDIUMIBM Sterling Secure Proxy HOST header injectionEPSS 0.4%CVE-2026-11714HIGHIBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerabilityEPSS 0.4%CVE-2021-39014MEDIUMIBM Cloud Object Storage System cross-site scriptingEPSS 0.4%CVE-2026-15093MEDIUMMultiple Vulnerabilities in IBM Engineering AI hub.EPSS 0.4%CVE-2022-22402MEDIUMIBM Aspera Faspex cross-site scriptingEPSS 0.4%