Vulnerabilidades en IBM

5652 resultados
Análisis Vexday

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2026-17182CRITICALIBM Db2 Mirror for i is affected by multiple vulnerabilitiesEPSS 0.7%CVE-2021-29761MEDIUMIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an authenticated user to obtain sensitive information from EPSS 0.7%CVE-2020-4646MEDIUMIBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5, 6.0.0.0 through 6.0.3.3, and 6.1.0.0 through 6.1.0.2 could allow an auEPSS 0.7%CVE-2021-20420MEDIUMIBM Security Guardium 11.2 could disclose sensitive information due to reliance on untrusted inputs that could aid in further attacks againsEPSS 0.7%CVE-2021-20563MEDIUMIBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 could allow a remote authenciated user to obtain sensitive information. By sending a speciEPSS 0.7%CVE-2020-4941MEDIUMIBM Edge 4.2 could reveal sensitive version information about the server from error pages that could aid an attacker in further attacks agaiEPSS 0.7%CVE-2021-20376MEDIUMIBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated attacker to enumerate usernames due to there being an observaEPSS 0.7%CVE-2022-35288MEDIUMIBM Security Verify Information Queue 10.0.2 could allow a user to obtain sensitive information that could be used in further attacks againsEPSS 0.7%CVE-2023-43045MEDIUMIBM Sterling Partner Engagement Manager security bypassEPSS 0.7%CVE-2022-22331MEDIUMIBM SterlingPartner Engagement Manager 6.2.0 could allow a remote authenticated attacker to obtain sensitive information or modify user detaEPSS 0.7%CVE-2021-20407MEDIUMIBM Security Verify Information Queue information disclosureEPSS 0.7%CVE-2017-1234—IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web EPSS 0.7%CVE-2020-4811LOWIBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious dEPSS 0.7%CVE-2024-45663MEDIUMIBM Db2 denial of serviceEPSS 0.7%CVE-2020-4970MEDIUMIBM Security Identity Governance and Intelligence 5.2.4, 5.2.5, and 5.2.6 could allow a remote attacker to obtain sensitive information, cauEPSS 0.7%CVE-2017-1446—IBM Emptoris Spend Analysis 9.5.0.0 through 10.1.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitraryEPSS 0.7%CVE-2023-28953LOWIBM Cognos Analytics on Cloud Pak for Data improper access controlEPSS 0.7%CVE-2020-4320MEDIUMIBM MQ Appliance and IBM MQ AMQP Channels 8.0, 9.0 LTS, 9.1 LTS, and 9.1 CD do not correctly block or allow clients based on the certificateEPSS 0.7%CVE-2022-22460LOWIBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacksEPSS 0.7%CVE-2019-4530MEDIUMIBM Maximo Asset Management 7.6, 7.6.1, and 7.6.1.1 could allow an authenticated user to delete a record that they should not normally be abEPSS 0.7%