Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2023-28517MEDIUMIBM Sterling Partner Engagement Manager cross-site scriptingEPSS 0.3%CVE-2025-36372MEDIUMIBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tablesEPSS 0.3%CVE-2019-4444MEDIUMIBM API Connect 2018.1 through 2018.4.1.7 Developer Portal's user registration page does not disable password autocomplete. An attacker withEPSS 0.3%CVE-2023-47731MEDIUMIBM QRadar Suite Software cross-site scriptingEPSS 0.3%CVE-2023-43054MEDIUMIBM Engineering Test Management cross-site scriptingEPSS 0.3%CVE-2024-39752MEDIUMIBM Analytics Content Hub file uploadEPSS 0.3%CVE-2026-11540MEDIUMIBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesEPSS 0.3%CVE-2026-17472CRITICALMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.3%CVE-2022-38382MEDIUMIBM Cloud Pak for Security session fixationEPSS 0.3%CVE-2026-15069MEDIUMMultiple Vulnerabilities in IBM Engineering AI hub.EPSS 0.3%CVE-2024-52894MEDIUMIBM Db2 for Linux, UNIX and Windows denial of serviceEPSS 0.3%CVE-2026-17619HIGHThe IBM Platform RTM is affected by an SQL injection vulnerabilityEPSS 0.3%CVE-2026-14515MEDIUMIBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilitiesEPSS 0.3%CVE-2026-7362MEDIUMImproper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File GatewayEPSS 0.3%CVE-2026-18133MEDIUMIBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.3%CVE-2020-4602MEDIUMIBM Security Guardium Insights 2.0.2 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 18483EPSS 0.3%CVE-2024-7577MEDIUMIBM InfoSphere Information Server information disclosureEPSS 0.3%CVE-2025-36120HIGHIBM Storage Virtualize privilege escalationEPSS 0.3%CVE-2025-14148MEDIUMIBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerabilityEPSS 0.3%CVE-2026-3158MEDIUMSecurity Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosureEPSS 0.3%