ibm

8,202 tracked vulnerabilities.

CVE-2023-23475 MEDIUM
IBM Infosphere Information Server 11.7 - Stored Cross-Site Scripting
Feb 08, 2023
CVSS 4.6
EPSS 0.00
CVE-2023-23477 HIGH
IBM WebSphere Application Server 8.5 and 9.0 - Remote Code Execution via Serialized Objects
Feb 03, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-23469 MEDIUM
IBM ICP4A - Automation Decision Services <22.0.2 - Info Disclosure
Feb 01, 2023
CVSS 4.0
EPSS 0.00
CVE-2023-22863 MEDIUM
IBM Robotic Process Automation 20.12.0-21.0.2 - Cleartext Transmission of Sensitive Information via Default HTTP
Jan 18, 2023
CVSS 5.9
EPSS 0.00
CVE-2023-22594 MEDIUM
IBM Robotic Process Automation < 21.0.5 - Cross-Site Scripting in Web UI
Jan 18, 2023
CVSS 4.6
EPSS 0.00
CVE-2023-22592 MEDIUM
IBM Robotic Process Automation for Cloud Pak 21.0.1-21.0.4 - Unauthorized Actions via Insufficient Permission Settings
Jan 18, 2023
CVSS 4.0
EPSS 0.00
CVE-2023-22875 HIGH
IBM QRadar SIEM 7.4 and 7.5 - Unauthorized Exposure of Certificate Key Files
Jan 17, 2023
CVSS 8.4
EPSS 0.00
CVE-2022-43852 MEDIUM
IBM Aspera Console <3.4.4 - Info Disclosure
Apr 14, 2025
CVSS 5.3
EPSS 0.00
CVE-2022-43851 MEDIUM
IBM Aspera Console <3.4.5 - Info Disclosure
Apr 14, 2025
CVSS 5.9
EPSS 0.00
CVE-2022-43850 MEDIUM
IBM Aspera Console 3.4.0-3.4.4 - Stored Cross-Site Scripting in Web UI
Apr 14, 2025
CVSS 5.4
EPSS 0.00
CVE-2022-43847 MEDIUM
IBM Aspera Console 3.4.0-3.4.4 - HTTP Header Injection via HOST Header
Apr 14, 2025
CVSS 5.4
EPSS 0.00
CVE-2022-43840 MEDIUM
IBM Aspera Console <3.4.4 - XPath Injection
Apr 14, 2025
CVSS 4.3
EPSS 0.00
CVE-2022-39163 MEDIUM
IBM Cognos Controller 11.0.0-11.1.0 - Client-Side Desync via HTTP Request Smuggling
Mar 26, 2025
CVSS 4.7
EPSS 0.00
CVE-2022-43916 MEDIUM
IBM App Connect Enterprise Certified Container <12.7 - DoS
Jan 30, 2025
CVSS 6.8
EPSS 0.00
CVE-2022-22491 MEDIUM
IBM App Connect Enterprise Certified Container - DoS
Jan 09, 2025
CVSS 5.5
EPSS 0.00
CVE-2022-22363 MEDIUM
IBM Cognos Controller <11.0.1 - Info Disclosure
Jan 07, 2025
CVSS 4.3
EPSS 0.00
CVE-2022-33954 MEDIUM
IBM Robotic Process Automation <21.0.4 - Info Disclosure
Dec 19, 2024
CVSS 4.6
EPSS 0.00
CVE-2022-43845 LOW
IBM Aspera Console <3.4.4 - Info Disclosure
Sep 25, 2024
CVSS 3.7
EPSS 0.00
CVE-2022-43915 MEDIUM
IBM App Connect Enterprise Certified Container <12.1 - Privilege Es...
Aug 24, 2024
CVSS 6.8
EPSS 0.00
CVE-2022-33162 HIGH
IBM Security Directory Integrator <7.2.0 and Security Verify Direct...
Aug 16, 2024
CVSS 7.3
EPSS 0.00
CVE-2022-38382 MEDIUM
IBM Cloud Pak for Security <1.10.11.0 & QRadar Suite Software <1.10...
Aug 13, 2024
CVSS 4.7
EPSS 0.00
CVE-2022-33167 LOW
IBM Security Directory Integrator <7.2.0 & Verify Directory Integra...
Jul 30, 2024
CVSS 3.7
EPSS 0.00
CVE-2022-32759 MEDIUM
IBM Security Directory Integrator 7.2.0 & Verify Directory Integrator 10.0.0 - Insufficient Session Expiration
Jul 25, 2024
CVSS 5.3
EPSS 0.00
CVE-2022-35640 MEDIUM
IBM Sterling Partner Engagement Manager 6.2.2 - Info Disclosure
Jul 16, 2024
CVSS 4.0
EPSS 0.00
CVE-2022-38383 MEDIUM
IBM Cloud Pak for Security <1.10.11.0 - Info Disclosure
Jun 28, 2024
CVSS 4.0
EPSS 0.00
Products
websphere_application_server 445 aix 393 db2 328 rational_quality_manager 202 sterling_b2b_integrator 195 infosphere_information_server 188 qradar_security_information_and_event_manager 187 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 102 sterling_file_gateway 93 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 vios 85 rational_software_architect_design_manager 81 api_connect 79 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 63
Quick Filters
Critical CVEs With Exploits In CISA KEV