Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2026-2482LOWIBM WebSphere Application Server Liberty is affected by a cross-site request forgeryEPSS 0.2%CVE-2018-1518MEDIUMIBM InfoSphere Information Server 11.7 is affected by a weak password encryption vulnerability that could allow a local user to obtain highlEPSS 0.2%CVE-2023-37400HIGHIBM Aspera Faspex privilege escalationEPSS 0.2%CVE-2026-84083HIGHIBM Guardium Data Protection is affected by multiple vulnerabilities.EPSS 0.2%CVE-2026-17429HIGHPower System Incorrect AuthorizationEPSS 0.2%CVE-2025-13734MEDIUMIBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissionsEPSS 0.1%CVE-2025-36002MEDIUMIBM Sterling B2B Integrator information disclosureEPSS 0.1%CVE-2026-17483MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]EPSS 0.1%CVE-2024-56812LOWIBM EntireX information disclosureEPSS 0.1%CVE-2023-40685HIGHIBM i privilege escalationEPSS 0.1%CVE-2024-51448MEDIUMIBM Robotic Process Automation privilege escalationEPSS 0.1%CVE-2026-6389HIGHIBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerabilityEPSS 0.1%CVE-2026-13272MEDIUMSecurity vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify AccessEPSS 0.1%CVE-2022-22367MEDIUMIBM UrbanCode Deploy (UCD) 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain tEPSS 0.1%CVE-2025-36379MEDIUMIBM Security QRadar EDR Software has multiple vulnerabilitiesEPSS 0.1%CVE-2023-22592MEDIUMIBM Robotic Process Automation for Cloud Pak insufficient permission settingsEPSS 0.1%CVE-2026-17133HIGHIBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEsEPSS 0.1%CVE-2026-75777HIGHMultiple vulnerabilities in IBM Aspera Enterprise WebappsEPSS 0.1%CVE-2025-36173MEDIUMInfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.EPSS 0.1%CVE-2026-7771MEDIUMIBM® Db2® is vulnerable to a trap when compiling specially crafted statements containing subqueries could lead to a denial of serviceEPSS 0.1%