ibm

8,286 tracked vulnerabilities.

CVE-2026-3345 MEDIUM
IBM Langflow Desktop API v2 File Upload - Path Traversal
Apr 30, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-2311 MEDIUM
IBM i Web Administration GUI - Privilege Escalation
Apr 30, 2026
CVSS 6.4
EPSS 0.00
CVE-2026-1577 MEDIUM
IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueries
Apr 30, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-4503 HIGH
IBM Langflow Desktop Image Download - Unauthenticated Object Reference
Apr 30, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-4502 MEDIUM
IBM Langflow Desktop - Path Traversal Arbitrary File Write
Apr 30, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-3346 MEDIUM
Stored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRaw
Apr 30, 2026
CVSS 6.4
EPSS 0.00
CVE-2026-3340 MEDIUM
Server-Side Request Forgery (SSRF) in Langflow URL Component
Apr 30, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-6732 MEDIUM
Libxml2: libxml2: denial of service via crafted xsd-validated document
Apr 23, 2026
CVSS 6.5
EPSS 0.01
CVE-2026-5935 HIGH
IBM TSSC/TS4500 IMC 9.2 to 9.6 - OS Command Injection
Apr 23, 2026
CVSS 7.3
EPSS 0.00
CVE-2026-5926 MEDIUM
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Apr 23, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-4919 MEDIUM
IBM Guardium Data Protection is affected by multiple vulnerabilities
Apr 23, 2026
CVSS 4.8
EPSS 0.00
CVE-2026-4918 MEDIUM
IBM Guardium Data Protection is affected by multiple vulnerabilities
Apr 23, 2026
CVSS 5.5
EPSS 0.00
CVE-2026-4917 MEDIUM
IBM Guardium Data Protection is affected by multiple vulnerabilities
Apr 23, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-3621 HIGH
IBM WebSphere Application Server Liberty is affected by identity spoofing
Apr 23, 2026
CVSS 7.5
EPSS 0.00
CVE-2026-1726 MEDIUM
IBM Guardium Key Lifecycle Manager 4.1-5.1 - Privilege Management Vulnerability
Apr 23, 2026
CVSS 4.8
EPSS 0.00
CVE-2026-1352 MEDIUM
IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined index
Apr 23, 2026
CVSS 6.5
EPSS 0.00
CVE-2026-1274 MEDIUM
IBM Guardium Data Protection is affected by multiple vulnerabilities
Apr 23, 2026
CVSS 4.9
EPSS 0.00
CVE-2026-1272 LOW
IBM Guardium Data Protection is affected by multiple vulnerabilities
Apr 23, 2026
CVSS 2.7
EPSS 0.00
CVE-2026-4788 HIGH
IBM Tivoli Netcool Impact 7.1.0.0-7.1.0.37 - Sensitive Log Disclosure
Apr 08, 2026
CVSS 8.4
EPSS 0.00
CVE-2026-3357 HIGH
IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
Apr 08, 2026
CVSS 8.8
EPSS 0.00
CVE-2026-1346 CRITICAL
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Apr 08, 2026
CVSS 9.3
EPSS 0.00
CVE-2026-1343 HIGH
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Apr 08, 2026
CVSS 7.2
EPSS 0.00
CVE-2026-1342 HIGH
Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Apr 08, 2026
CVSS 8.5
EPSS 0.00
CVE-2026-1243 MEDIUM
IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability
Apr 02, 2026
CVSS 5.4
EPSS 0.00
CVE-2026-4820 MEDIUM
IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag
Apr 01, 2026
CVSS 4.3
EPSS 0.00
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 65
Quick Filters
Critical CVEs With Exploits In CISA KEV