Skip to content
OpenAdvisories

Vendor

IBM

6,555 known vulnerabilities.

Products

API Connect 287 AIX 217 i 213 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 65 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45
All Critical High Medium Low Exploited only Public exploit

67 results · Clear filters · Feed

  • Critical 9.1
    CVE-2020-4428 Exploited Public exploit EPSS 62%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary c…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • Critical 10.0
    CVE-2020-4429 Public exploit Scanner template EPSS 72%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM administrati…

    IBM Data Risk Manager
  • Critical 9.0
    CVE-2020-4427 Exploited Public exploit Scanner template EPSS 70%

    IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security res…

    IBM Data Risk Manager
    KEV Nov 3, 2021
  • High 7.5
    CVE-2020-4276 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…

    IBM WebSphere Application Server
  • Critical 10.0
    CVE-2019-4716 Exploited Public exploit Scanner template EPSS 86%

    IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated us…

    IBM Planning Analytics
    KEV Nov 3, 2021
  • Critical 9.0
    CVE-2019-4279 Public exploit EPSS 80%

    IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with…

    IBM WebSphere Application Server
  • Critical 9.0
    CVE-2019-4013 Public exploit EPSS 13%

    IBM BigFix Platform 9.5 could allow any authenticated user to upload any file to any location on the server with root p…

    IBM BigFix Platform
  • Medium 5.3
    CVE-2019-4061 Public exploit Scanner template EPSS 23%

    IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the up…

    IBM BigFix Platform
  • Medium 4.9
    CVE-2018-1932 Public exploit

    IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the manageme…

    IBM API Connect
  • High 7.1
    CVE-2018-1821 Public exploit EPSS 16%

    IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) …

    IBM Operational Decision Management
  • High 7.5
    CVE-2018-1756 Public exploit EPSS 11%

    IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker c…

    IBM Security Identity Governance and Intelligence
  • Medium 5.4
    CVE-2018-1513 Public exploit

    IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerabil…

    IBM Sterling B2B Integrator
  • Medium 5.4
    CVE-2018-1563 Public exploit

    IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-sit…

    IBM Sterling File Gateway
  • Medium 5.8
    CVE-2018-1612 Public exploit EPSS 56%

    IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and…

    IBM QRadar SIEM
  • Unscored —
    CVE-2018-1418 Public exploit EPSS 51%

    IBM Security QRadar SIEM 7.2 and 7.3 could allow a user to bypass authentication which could lead to code execution. IB…

    IBM Security QRadar SIEM
  • Unscored —
    CVE-2016-9722 Public exploit EPSS 12%

    IBM QRadar 7.2 and 7.3 specifies permissions for a security-critical resource in a way that allows that resource to be …

    IBM Security QRadar SIEM
  • Unscored —
    CVE-2017-1635 Public exploit

    IBM Tivoli Monitoring V6 6.2.2.x could allow a remote attacker to execute arbitrary code on the system, caused by a use…

    IBM Tivoli Monitoring V6
  • Unscored —
    CVE-2017-1235 Public exploit

    IBM WebSphere MQ 8.0 could allow an authenticated user to cause a premature termination of a client application thread …

    IBM MQ
  • Unscored —
    CVE-2017-1130 Public exploit EPSS 29%

    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it wou…

    IBM Notes
  • Unscored —
    CVE-2017-1129 Public exploit EPSS 30%

    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it cou…

    IBM Notes Lotus Expeditor
  • Unscored —
    CVE-2017-1182 Public exploit

    IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the sy…

    IBM Tivoli Monitoring V6
  • Unscored —
    CVE-2017-1297 Public exploit

    IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-ba…

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Unscored —
    CVE-2017-1092 Public exploit EPSS 76%

    IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system …

    IBM Informix Servers
  • Unscored —
    CVE-2017-1274 Public exploit

    IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated…

    IBM Domino
  • Unscored —
    CVE-2016-6079 Public exploit

    IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to o…

    IBM AIX
  • Unscored —
    CVE-2016-8972 Public exploit

    IBM AIX 6.1, 7.1, and 7.2 could allow a local user to gain root privileges using a specially crafted command within the…

    IBM AIX
  • Unscored —
    CVE-2016-3053 Public exploit

    IBM AIX contains an unspecified vulnerability that would allow a locally authenticated user to obtain root level privil…

    IBM AIX