ibm

8,286 tracked vulnerabilities.

CVE-2023-30988 HIGH
IBM i 7.2-7.5 - Local Privilege Escalation via Facsimile Support
Jul 16, 2023
CVSS 8.4
EPSS 0.00
CVE-2023-30449 HIGH
IBM Db2 10.5, 11.1, 11.5 - Denial of Service via Crafted Query
Jul 10, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-30448 MEDIUM
IBM DB2 10.5, 11.1, 11.5 - Denial of Service via Specially Crafted Query
Jul 10, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-30447 MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Denial of Service via Specially Crafted Query
Jul 10, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-30446 MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Denial of Service via Specially Crafted Query
Jul 10, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-30445 HIGH
IBM Db2 10.5, 11.1, 11.5 - Denial of Service via Specially Crafted Query
Jul 10, 2023
CVSS 7.5
EPSS 0.01
CVE-2023-30442 MEDIUM
IBM Db2 11.1 and 11.5 - Denial of Service via Crafted Wrapper Options
Jul 10, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-30431 HIGH
IBM Db2 10.5, 11.1, 11.5 - Buffer Overflow in db2set
Jul 10, 2023
CVSS 8.4
EPSS 0.00
CVE-2023-29256 MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Information Disclosure via Federation Feature Privilege Mismanagement
Jul 10, 2023
CVSS 5.3
EPSS 0.01
CVE-2023-28958 HIGH
IBM Watson Knowledge Catalog - Code Injection
Jul 10, 2023
CVSS 7.0
EPSS 0.01
CVE-2023-28955 MEDIUM
IBM Watson Knowledge Catalog <4.0 - DoS
Jul 10, 2023
CVSS 6.5
EPSS 0.01
CVE-2023-28953 LOW
IBM Cognos Analytics - Privilege Escalation
Jul 10, 2023
CVSS 3.1
EPSS 0.01
CVE-2023-27869 MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Authenticated Remote Code Execution via TraceFile Logger Injection
Jul 10, 2023
CVSS 6.3
EPSS 0.02
CVE-2023-27868 MEDIUM
IBM Db2 JDBC Driver 10.5, 11.1, 11.5 - Authenticated Remote Code Execution via Plugin Class Instantiation
Jul 10, 2023
CVSS 6.3
EPSS 0.02
CVE-2023-27867 MEDIUM
IBM Db2 JDBC Driver 10.5, 11.1, 11.5 - Authenticated Remote Code Execution via JNDI Injection
Jul 10, 2023
CVSS 6.3
EPSS 0.02
CVE-2023-27558 HIGH
IBM Db2 10.5, 11.1, 11.5 - Privilege Escalation via Unquoted Service Path
Jul 10, 2023
CVSS 8.4
EPSS 0.00
CVE-2023-27540 MEDIUM
IBM Watson CP4D Data Stores 4.6.0 - Denial of Service via Resource Allocation Without Limits
Jul 10, 2023
CVSS 5.9
EPSS 0.01
CVE-2023-23487 MEDIUM
IBM Db2 11.1 and 11.5 - Insufficient Audit Logging
Jul 10, 2023
CVSS 4.3
EPSS 0.01
CVE-2023-35890 MEDIUM
IBM WebSphere Application Server 8.5 and 9.0 - Use of a Broken or Risky Cryptographic Algorithm
Jul 07, 2023
CVSS 5.1
EPSS 0.00
CVE-2023-30990 HIGH
IBM i 7.2-7.5 - Remote Code Execution via DDM Architecture
Jul 04, 2023
CVSS 8.6
EPSS 0.01
CVE-2023-27866 MEDIUM
IBM Informix JDBC Driver 4.10 and 4.50 - Remote Code Execution via JNDI Injection
Jun 28, 2023
CVSS 6.3
EPSS 0.01
CVE-2023-30993 MEDIUM
IBM Cloud Pak for Security <1.9.3 - Info Disclosure
Jun 27, 2023
CVSS 6.8
EPSS 0.01
CVE-2023-23468 MEDIUM
IBM Robotic Process Automation for Cloud Pak <21.0.7.3, 23.0.3 - Pr...
Jun 27, 2023
CVSS 5.1
EPSS 0.00
CVE-2023-22593 MEDIUM
IBM Robotic Process Automation 21.0.1-21.0.7.3 & 23.0.0-23.0.3 Privilege Escalation via Redis Misconfiguration
Jun 27, 2023
CVSS 4.0
EPSS 0.00
CVE-2023-26276 MEDIUM
IBM QRadar SIEM <7.5.0 - Info Disclosure
Jun 27, 2023
CVSS 5.9
EPSS 0.00
Products
websphere_application_server 465 aix 400 db2 339 rational_quality_manager 202 sterling_b2b_integrator 195 qradar_security_information_and_event_manager 190 infosphere_information_server 189 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 104 sterling_file_gateway 93 vios 92 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 api_connect 81 rational_software_architect_design_manager 81 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 65
Quick Filters
Critical CVEs With Exploits In CISA KEV