Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2025-33137HIGHIBM Aspera Faspex data modificationEPSS 0.3%CVE-2018-1725LOWIBM QRadar SIEM 7.3 and 7.4 n a multi tenant configuration could be vulnerable to information disclosure. IBM X-Force ID: 147440.EPSS 0.3%CVE-2021-29672HIGHIBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking whenEPSS 0.3%CVE-2026-16702MEDIUMIBM® Db2® federated server could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereferenceEPSS 0.3%CVE-2025-0163MEDIUMIBM Security Verify Access information disclosureEPSS 0.3%CVE-2026-17222MEDIUMIBM i is Affected By Multiple Vulnerabilities in SQLEPSS 0.3%CVE-2024-52367MEDIUMIBM Concert Software information disclosureEPSS 0.3%CVE-2026-17463MEDIUMIBM® Db2® could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumptionEPSS 0.3%CVE-2025-25025MEDIUMIBM Security Guardium information disclosureEPSS 0.3%CVE-2025-33136HIGHIBM Aspera Faspex data modificationEPSS 0.3%CVE-2024-45077MEDIUMIBM Maximo Asset Management file uploadEPSS 0.3%CVE-2026-17015MEDIUMIBM i Denial of ServiceEPSS 0.3%CVE-2016-2972—IBM Sametime Meeting Server 8.5.2 and 9.0 could store credentials of the Sametime Meetings user in the local cache of their browser which coEPSS 0.3%CVE-2024-38324MEDIUMIBM Storage Defender improper certificate validationEPSS 0.3%CVE-2026-8834HIGHIBM HTTP Server is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2024-51471MEDIUMIBM MQ Appliance denial of serviceEPSS 0.3%CVE-2024-41738MEDIUMIBM TXSeries for Multiplatforms information disclosureEPSS 0.3%CVE-2025-2669MEDIUMMultiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data.EPSS 0.3%CVE-2016-9749MEDIUMIBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an authenticated user with access to the local network to bypass security due to lack EPSS 0.3%CVE-2025-14150MEDIUMIBM webMethods Integration Sever is affected byEPSS 0.3%