Vulnerabilities in IBM

5,658 results
Vexday analysis

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2026-17442MEDIUMIBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEsEPSS 0.1%CVE-2024-45636MEDIUMIBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.EPSS 0.1%CVE-2025-12708MEDIUMMultiple Vulnerabilities in IBM Concert SoftwareEPSS 0.1%CVE-2025-1351MEDIUMIBM Storage Virtualize privilege escalationEPSS 0.1%CVE-2025-36335MEDIUMVulnerabilities foundEPSS 0.1%CVE-2026-19087MEDIUMIBM Financial Transaction Manager (FTM) is Impacted by Multiple VulnerabilitiesEPSS 0.1%CVE-2026-84414HIGHIBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []EPSS 0.1%CVE-2026-17009MEDIUMVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-16925HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2025-36105MEDIUMIBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerabilityEPSS 0.1%CVE-2026-16923HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2023-37396LOWIBM Aspera Faspex information disclosureEPSS 0.1%CVE-2023-37397LOWIBM Aspera Faspex data manipulationEPSS 0.1%CVE-2026-16935HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-16927HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.1%CVE-2026-18567MEDIUMIBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]EPSS 0.1%CVE-2023-37395LOWIBM Aspera Faspex information disclosureEPSS 0.1%CVE-2026-18104LOWIBM Db2 Mirror for i is vulnerable to obtain sensitive information []EPSS 0.1%