Vulnerabilidades en IBM

5652 resultados
Análisis Vexday

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2017-1473—IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms thaEPSS 0.9%CVE-2021-20541LOWIBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0, 1.6.1.0, 1.7.0.0, and 1.7.1.0 could disclose sensitive information to an unauthEPSS 0.9%CVE-2020-4482MEDIUMIBM UrbanCode Deploy (UCD) 6.2.7.3, 6.2.7.4, 7.0.3.0, and 7.0.4.0 could allow an authenticated user to bypass security. A user with access tEPSS 0.9%CVE-2022-36769HIGHIBM Cloud Pak for Data file uploadEPSS 0.9%CVE-2021-39023LOWIBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical eEPSS 0.9%CVE-2023-35895MEDIUMIBM Informix JDBC code executionEPSS 0.9%CVE-2019-4056MEDIUMIBM Maximo Asset Management 7.6 Work Centers' application does not validate file type upon upload, allowing attackers to upload malicious fiEPSS 0.9%CVE-2017-1292—IBM Maximo Asset Management 7.5 and 7.6 generates error messages that could reveal sensitive information that could be used in further attacEPSS 0.9%CVE-2020-4760MEDIUMIBM Content Navigator 3.0CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in theEPSS 0.9%CVE-2020-4704MEDIUMIBM Content Navigator 3.0CD is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript codeEPSS 0.9%CVE-2026-81204CRITICALLangflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guardsEPSS 0.9%CVE-2026-16956CRITICALIBM Db2 Mirror for i is vulnerable to OS command injection []EPSS 0.9%CVE-2023-32330HIGHIBM Security Verify Access man in the middleEPSS 0.9%CVE-2026-16882CRITICALVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.9%CVE-2026-10109CRITICALIBM® Db2® is vulnerable to remote code execution due to improper pre-auth DRDA handshake handlingEPSS 0.9%CVE-2020-4490MEDIUMIBM Business Automation Workflow 18 and 19, and IBM Business Process Manager 8.0, 8.5, and 8.6 could allow a remote attacker to bypass securEPSS 0.9%CVE-2026-9170CRITICALIBM HTTP Server is affected by multiple vulnerabilitiesEPSS 0.9%CVE-2023-27554MEDIUMIBM WebSphere Application Server XML external entity injectionEPSS 0.9%CVE-2022-41731HIGHIBM Watson Knowledge Catalog on Cloud Pak SQL injectionEPSS 0.9%CVE-2026-81545HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.9%