Vulnerabilidades em IBM

5.652 resultados
Análise Vexday

Com 4.716 CVEs catalogadas, o portfólio da IBM acumula um volume expressivo de vulnerabilidades, embora sua taxa de exploração ativa — 5 entradas no catálogo KEV da CISA, representando 0,11% do total — esteja abaixo da média geral do catálogo (0,45%), o que sugere menor aproveitamento ativo em comparação proporcional com outros vendors. A atenção deve se concentrar em CVE-2022-47986, cuja pontuação EPSS de 0,9997 indica probabilidade extremamente elevada de exploração ativa, tornando-a prioridade imediata de mitigação. As 92 CVEs críticas e 18 com PoC pública ampliam a superfície de risco concreto, especialmente considerando que 129 novas vulnerabilidades surgiram nos últimos 90 dias, indicando ritmo relevante de descoberta recente. O tipo de falha mais recorrente, CWE-79 (Cross-Site Scripting), aponta para fragilidades persistentes na camada de apresentação que exigem atenção continuada em práticas de desenvolvimento e validação de entrada.

CVE-2016-3019—IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly EPSS 0.8%CVE-2019-4744MEDIUMIBM Financial Transaction Manager 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript cEPSS 0.8%CVE-2016-2979—IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScriEPSS 0.8%CVE-2016-2973—IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScriEPSS 0.8%CVE-2023-38366MEDIUMIBM FileNet Content Manager directory traversalEPSS 0.8%CVE-2026-16911HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2026-16975HIGHIBM i is Affected By A Remote Code Execution Vulnerability []EPSS 0.8%CVE-2017-1100—IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScEPSS 0.8%CVE-2026-17223HIGHIBM i is Affected By Multiple Vulnerabilities in Host ServersEPSS 0.8%CVE-2017-1104—IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScEPSS 0.8%CVE-2022-35284MEDIUMIBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensEPSS 0.8%CVE-2026-16877HIGHVulnerabilities in IBM AIX and PowerVM VIOSEPSS 0.8%CVE-2017-1102—IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScEPSS 0.8%CVE-2017-1101—IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScEPSS 0.8%CVE-2026-81552HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.8%CVE-2026-81548HIGHDataStage on Cloud Pak for Data has several vulnerabilitiesEPSS 0.8%CVE-2021-20413MEDIUMIBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error mesEPSS 0.8%CVE-2020-4696MEDIUMIBM Cloud Pak for Security 1.3.0.1(CP4S) does not invalidate session after logout which could allow an authenticated user to obtain sensitivEPSS 0.8%CVE-2019-4603MEDIUMIBM Quality Manager (RQM) 6.02, 6.06, and 6.0.6.1 could allow an authenticated user to create keywords through the REST API and have them apEPSS 0.7%CVE-2024-41742HIGHIBM TXSeries for Multiplatforms denial of serviceEPSS 0.7%