Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2019-4161MEDIUMIBM Security Information Queue (ISIQ) 1.0.0, 1.0.1, and 1.0.2 discloses sensitive information to unauthorized users. The information can be EPSS 0.3%CVE-2024-41781MEDIUMIBM PowerVM Hypervisor information disclosureEPSS 0.3%CVE-2025-1493MEDIUMIBM Db2 denial of serviceEPSS 0.3%CVE-2023-47727MEDIUMIBM QRadar Suite Software file manipulationEPSS 0.3%CVE-2023-47699MEDIUMIBM Secure Proxy cross-site scriptingEPSS 0.3%CVE-2026-16837HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.3%CVE-2020-4927MEDIUMIBM Spectrum Scale information disclosureEPSS 0.3%CVE-2026-16687CRITICALPower System Buffer OverflowEPSS 0.3%CVE-2023-22595MEDIUMIBM B2B Advanced Communication cross-site scriptingEPSS 0.3%CVE-2023-23475MEDIUMIBM Infosphere Information Server cross-site scriptingEPSS 0.3%CVE-2023-29260MEDIUMIBM Sterling Connect:Express for UNIX server-side request forgeryEPSS 0.3%CVE-2026-17227MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2020-4353MEDIUMIBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricteEPSS 0.3%CVE-2017-1125—IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents EPSS 0.3%CVE-2024-39727MEDIUMIBM Engineering Lifecycle Optimization - Engineering Insights tabnabbingEPSS 0.3%CVE-2024-56343MEDIUMIBM Verify Identity Access Digital Credentials denial of serviceEPSS 0.3%CVE-2023-38272MEDIUMIBM Cloud Pak System information disclosureEPSS 0.3%CVE-2026-11375HIGHIBM MQ queue manager is vulnerable to remote code executionEPSS 0.3%CVE-2021-39027LOWIBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or eEPSS 0.3%CVE-2026-18148MEDIUMIBM i is Affected By Multiple Vulnerabilities in Navigator for iEPSS 0.3%