Vulnerabilidades em IBM

6.181 resultados
Análise Vexday

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2015-0102—IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackersEPSS 1.7%CVE-2018-1757MEDIUMIBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive information due to missing aEPSS 1.7%CVE-2019-4169HIGHIBM Open Power Firmware OP910 and OP920 could allow access to BMC via IPMI using default OpenBMC password even after BMC password was changeEPSS 1.7%CVE-2026-16468HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2020-4616MEDIUMIBM Data Risk Manager (iDNA) 2.0.6 could disclose sensitive username information to an attacker using a specially crafted HTTP request. IBM EPSS 1.7%CVE-2019-4051MEDIUMSome URIs in IBM API Connect 2018.1 and 2018.4.1.3 disclose system specification information like the machine id, system uuid, filesystem paEPSS 1.7%CVE-2017-1474MEDIUMIBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorizeEPSS 1.7%CVE-2019-4422HIGHIBM Security Guardium 9.0, 9.5, and 10.6 are vulnerable to a privilege escalation which could allow an authenticated user to change the acceEPSS 1.7%CVE-2017-1666—IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. AEPSS 1.7%CVE-2026-81537HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 1.7%CVE-2018-1833MEDIUMIBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has alreEPSS 1.7%CVE-2018-1674MEDIUMIBM Business Process Manager 8.5 through 8.6 and 18.0.0.0 through 18.0.0.1 are vulnerable to SQL injection. A remote attacker could send speEPSS 1.7%CVE-2018-1699MEDIUMIBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements,EPSS 1.7%CVE-2019-4059HIGHIBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the passEPSS 1.7%CVE-2021-29703HIGHDb2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server terminates abnormally when EPSS 1.7%CVE-2022-22360HIGHIBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injecEPSS 1.7%CVE-2017-1310—IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files toEPSS 1.7%CVE-2016-9711MEDIUMIBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an aEPSS 1.7%CVE-2018-1387MEDIUMIBM Application Performance Management for Monitoring & Diagnostics (IBM Monitoring 8.1.3 and 8.1.4) may release sensitive personal data to EPSS 1.7%CVE-2017-1774—IBM Security Guardium Big Data Intelligence (SonarG) 3.1 discloses sensitive information to unauthorized users. The information can be used EPSS 1.7%