Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2026-18144MEDIUMIBM i is Affected By Multiple Vulnerabilities in Navigator for iEPSS 0.3%CVE-2020-4886MEDIUMIBM InfoSphere Information Server 11.7 stores sensitive information in the browser's history that could be obtained by a user who has accessEPSS 0.3%CVE-2026-9745MEDIUMVulnerabilities exists in IBM Netezza SoftwareEPSS 0.3%CVE-2020-4871MEDIUMIBM Planning Analytics 2.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 190834.EPSS 0.3%CVE-2020-4311HIGHIBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an atEPSS 0.3%CVE-2024-22361MEDIUMIBM Semeru Runtime information disclosureEPSS 0.3%CVE-2026-11923HIGHSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.3%CVE-2026-18246LOWIBM i is Affected By security restrictions bypass in Navigator for iEPSS 0.3%CVE-2023-50311LOWIBM CICS Transaction Gateway for Multiplatforms information disclosureEPSS 0.3%CVE-2025-13333MEDIUMIBM WebSphere Application Server could provide weaker than expected securityEPSS 0.3%CVE-2017-1176—IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention oEPSS 0.3%CVE-2026-17079MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2024-35113MEDIUMIBM Control Center information disclosureEPSS 0.3%CVE-2019-4266LOWIBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 does not have device jailbreak detection which could result in an attacker gaininEPSS 0.3%CVE-2025-0966HIGHIBM InfoSphere Information Server SQL injectionEPSS 0.3%CVE-2020-4968MEDIUMIBM Security Identity Governance and Intelligence 5.2.6 uses weaker than expected cryptographic algorithms that could allow an attacker to dEPSS 0.3%CVE-2023-50307MEDIUMIBM Sterling B2B Integrator cross-site scriptingEPSS 0.3%CVE-2023-38017MEDIUMMultiple Vulnerabilities in IBM Cloud Pak SystemEPSS 0.3%CVE-2017-1207—IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 123777.EPSS 0.3%CVE-2022-32754MEDIUMIBM Security Verify Directory cross-site scriptingEPSS 0.3%