ibm

8,286 tracked vulnerabilities.

CVE-2023-35893 CRITICAL
IBM Security Guardium <11.5 - Command Injection
Aug 16, 2023
CVSS 9.9
EPSS 0.01
CVE-2023-38737 MEDIUM
IBM WebSphere Application Server Liberty <23.0.0.7 - DoS
Aug 16, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-38741 HIGH
IBM TXSeries for Multiplatforms <9.1 - DoS
Aug 14, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-38721 HIGH
IBM i 7.2-7.5 - Local Privilege Escalation via Facsimile Support
Aug 14, 2023
CVSS 8.4
EPSS 0.00
CVE-2023-23476 LOW
IBM Robotic Process Automation 21.0.0-21.0.7.latest - Unauthorized Data Access via Insufficient API Authorization
Aug 02, 2023
CVSS 3.1
EPSS 0.00
CVE-2023-24971 HIGH
IBM B2B Advanced Communications 1.0.0.0 & Multi-Enterprise Integration Gateway 1.0.0.1 DoS via Java Deserialization
Jul 31, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-22595 MEDIUM
IBM B2B Advanced Communications 1.0.0.0 and Multi-Enterprise Integration Gateway 1.0.0.1 - Cross-Site Scripting
Jul 31, 2023
CVSS 5.4
EPSS 0.00
CVE-2023-35019 HIGH
IBM Security Verify Governance 10.0 - Authenticated OS Command Injection
Jul 31, 2023
CVSS 7.2
EPSS 0.01
CVE-2023-35016 MEDIUM
IBM Security Verify Governance 10.0 - Path Traversal via URL Request
Jul 31, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-28530 MEDIUM
IBM Cognos Analytics 11.1.0-11.1.7 - Stored Cross-Site Scripting via SVG Files in Custom Visualizations
Jul 22, 2023
CVSS 5.4
EPSS 0.01
CVE-2023-25929 MEDIUM
IBM Cognos Analytics 11.1.0-11.1.7 - Cross-Site Scripting
Jul 22, 2023
CVSS 4.6
EPSS 0.00
CVE-2023-29260 MEDIUM
IBM Sterling Connect:Express for UNIX 1.5 - SSRF
Jul 19, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-29259 LOW
IBM Sterling Connect:Express for UNIX 1.5 - CSRF
Jul 19, 2023
CVSS 3.7
EPSS 0.00
CVE-2023-28513 MEDIUM
IBM MQ and MQ Appliance - Denial of Service via Message Processing Error
Jul 19, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-27877 MEDIUM
IBM Cloud Pak for Data 4.0 - Improper Authentication to CouchDB Server
Jul 19, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-26026 MEDIUM
Planning Analytics Cartridge - Info Disclosure
Jul 19, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-26023 MEDIUM
Planning Analytics Cartridge - Info Disclosure
Jul 19, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-35900 MEDIUM
IBM Robotic Process Automation < 21.0.7.4 - Information Disclosure via Server Version Exposure
Jul 19, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-35898 MEDIUM
IBM InfoSphere Information Server 11.7 - Info Disclosure
Jul 19, 2023
CVSS 4.3
EPSS 0.00
CVE-2023-33832 MEDIUM
IBM Spectrum Protect <8.1.17.0 - DoS
Jul 19, 2023
CVSS 6.2
EPSS 0.00
CVE-2023-30433 MEDIUM
IBM Security Verify Access 10.0 - Open Redirect via Crafted URL
Jul 19, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-35012 MEDIUM
IBM Db2 11.5 - Authenticated Stack-based Buffer Overflow
Jul 17, 2023
CVSS 6.7
EPSS 0.00
CVE-2023-35901 LOW
IBM Robotic Process Automation <21.0.7.6, <23.0.6 - CSRF
Jul 17, 2023
CVSS 2.7
EPSS 0.00
CVE-2023-33857 MEDIUM
IBM InfoSphere Information Server 11.7 - Info Disclosure
Jul 17, 2023
CVSS 5.3
EPSS 0.01
CVE-2023-30989 HIGH
IBM Performance Tools for i <7.6 - Privilege Escalation
Jul 16, 2023
CVSS 8.4
EPSS 0.00
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 65
Quick Filters
Critical CVEs With Exploits In CISA KEV