Skip to content
OpenAdvisories

Vendor

IBM

6,555 known vulnerabilities.

Products

API Connect 287 AIX 217 i 213 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 65 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • High 8.8
    CVE-2026-107326 Public exploit

    Langflow OSS is affected by multiple vulnerabilities

    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-104335 Public exploit

    Langflow OSS is affected by multiple vulnerabilities

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control.

    IBM Langflow OSS
  • High 8.8
    CVE-2026-18729 Public exploit

    Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

    IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code.

    IBM Langflow OSS
  • High 8.5
    CVE-2026-17633 Public exploit

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to code injection.

    IBM Langflow OSS
  • High 8.8
    CVE-2024-31903 Public exploit

    IBM Sterling B2B Integrator Standard Edition code execution

    IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data.

    IBM Sterling B2B Integrator Standard Edition
  • High 7.4
    CVE-2023-45185 Public exploit

    IBM i Access Client Solutions code execution

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code. Due to improper authority checks the attacker could perform operations on the PC under the user's authority. IBM X-Force ID: 268273.

    IBM i Access Client Solutions
  • High 7.4
    CVE-2023-45182 Public exploit

    IBM i Access Client Solutions information disclosure

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded. By somehow gaining access to the encrypted password, a local attacker could exploit this vulnerability to obtain t…

    IBM i Access Client Solutions
  • High 8.6
    CVE-2023-30990 Public exploit

    IBM i command execution

    IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.

    IBM i
  • High 8.4
    CVE-2023-28528 Public exploit

    IBM AIX command execution

    IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 251207.

    IBM AIX
  • High 8.2
    CVE-2020-4949 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack …

    IBM WebSphere Application Server
  • High 8.2
    CVE-2020-4463 Public exploit EPSS 32%

    IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when pro…

    IBM Maximo Asset Management
  • High 8.8
    CVE-2020-4464 Public exploit EPSS 13%

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary …

    IBM WebSphere Application Server
  • High 7.5
    CVE-2020-4276 Public exploit

    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional is vulnerable to a privilege escalation vulnerabili…

    IBM WebSphere Application Server
  • High 7.1
    CVE-2018-1821 Public exploit EPSS 16%

    IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) …

    IBM Operational Decision Management
  • High 7.5
    CVE-2018-1756 Public exploit EPSS 11%

    IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker c…

    IBM Security Identity Governance and Intelligence