Skip to contentIbm I vulnerabilities
- ibm websphere application serverIBM WebSphere Application Server is affected by a cross-site scripting vulnerabilityCVE-2026-117129.3 Critical
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerabilityCVE-2026-117148.5 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerabilityCVE-2026-118067.2 High
- ibm devops deploy, ucd - ibm devops deploy +1 moreIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted DomainsCVE-2026-120845.4 Medium
- ibm devops deploy, ucd - ibm devops deploy, ucd - ibm urbancode deploy +1 more +3 moreIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerabilityCVE-2026-120856.5 Medium
- ibm devops deploy, ucd - ibm devops deploy, ucd - ibm urbancode deploy +1 more +3 moreIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File VulnerabilityCVE-2026-120866.2 Medium
- ibm business automation manager open editions, business automation manager +1 moreXXE attack in IBM Business Automation Manager Open EditionsCVE-2026-134497.6 High
- ibm app connect enterprise, integration bus for z/os, integration bus +2 moreIBM App Connect Enterprise and IBM Integration Bus for z/OS toolkit is vulnerable to an sql injectionCVE-2026-36024.7 Medium
- ibm infosphere information serverIBM DataStage Flow Designer application is affected by an information disclosure vulnerabilityCVE-2026-98363.5 Low
- ibm i, websphere application server +1 moreWebsphere Application Server is Affected By a Denial of ServiceCVE-2026-108525.9 Medium
- ibm sterling b2b integrator, sterling file gateway, watson speech services cartridge +2 moreIBM Sterling File Gateway SQL InjectionCVE-2026-72536.0 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesCVE-2026-93205.9 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by Uncontrolled Resource ConsumptionCVE-2026-90717.5 High
- ibm websphere application serverIBM WebSphere Application Server is affected by server-side request forgeryCVE-2026-90067.4 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesCVE-2026-86467.4 High
- ibm websphere application serverIBM WebSphere Application Server is affected by an authentication bypass vulnerabilityCVE-2026-108457.3 High
- ibm engineering workflow managementIBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observedCVE-2024-514546.5 Medium
- ibm datacap, datacap navigator +1 moreMultiple Vulnerabilities in IBM DatacapCVE-2026-96102.3 Low
- ibm i, websphere application server +1 moreWebSphere Application Server Remote Code ExecutionCVE-2026-90728.1 High
- ibm i, websphere application server +1 moreWebSphere Application Server Remote Code ExecutionCVE-2026-88587.5 High
- ibm datacap, datacap navigator +1 moreMultiple Vulnerabilities in IBM DatacapCVE-2026-86365.5 Medium
- ibm datacap, datacap navigator +1 moreMultiple Vulnerabilities in IBM DatacapCVE-2026-80596.1 Medium
- ibm tririga application platformIBM TRIRIGA Cross-Site Scripting VulnerabilityCVE-2026-113725.4 Medium
- ibm storage protect client, storage protect snapshot for windows, storage protect +2 moreHardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to systemCVE-2026-126289.1 Critical
- ibm engineering workflow managementIBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities HTML / XSS Injection observedCVE-2025-331285.4 Medium
- ibm qiskit sdk, qiskit software development kit +1 moreQiskit SDK is vulnerable to specific functions may recurse too deeply and overflow the available stack space, when encountering certain classical expressions.CVE-2026-48707.5 High
- ibm security qradar edrIBM Security QRadar EDR Software has a vulnerability where user credentials may be stored in plain text, potentially exposing sensitive information.CVE-2024-456364.1 Medium
- ibm iIBM i is Affected by Privilege Escalation []CVE-2026-78708.8 High
- ibm websphere application serverIBM WebSphere Application Server is affected by remote code executionCVE-2026-93308.5 High
- ibm websphere application serverIBM WebSphere Application Server is affected by a remote code execution vulnerabilityCVE-2026-93199.0 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by remote code executionCVE-2026-93119.0 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by an identity spoofing vulnerabilityCVE-2026-86449.1 Critical
- ibm i access family, i access client solutions +1 moreIBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i NavigatorCVE-2026-77708.8 High
- ibm business automation workflow containers and traditional, business automation workflow +1 moreIBM Business Automation Workflow information leakCVE-2026-12484.3 Medium
- ibm aspera hsts for cp4i, aspera high-speed transfer server for cloud pak for integration +1 moreAuthentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for IntegrationCVE-2026-78769.1 Critical
- ibm operations analytics - log analysis, operations analytics log analysis +1 moreIBM Operations Analytics - Log Analysis is affected by Information disclosure due to default passwords not being forced to be changed on post-installationCVE-2026-73658.4 High
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar SIEM is vulnerable to using components with known vulnerabilitiesCVE-2024-564627.2 High
- ibm operations analytics - log analysis, operations analytics log analysis +1 moreIBM Operations Analytics - Log Analysis is affected by Weak Password Policy and Inadequate Account Lockout MechanismCVE-2024-406845.9 Medium
- ibm sdi, security directory integrator +1 moreSecurity vulnerability was found in IBM Security Directory IntegratorCVE-2024-287655.3 Medium
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.CVE-2026-90356.5 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by Exposure of Sensitive Information vulnerabilityCVE-2026-84056.5 Medium
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.CVE-2026-81807.5 High
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.CVE-2026-81798.8 High
- ibm aspera high-speed transfer endpoint, aspera high-speed transfer server +1 moreMultiple vulnerabilities in Aspera applications.CVE-2026-81759.8 Critical
- ibm iIBM i is Affected by a Denial of Service Vulnerability []CVE-2026-69366.5 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a security bypass vulnerabilityCVE-2026-55164.4 Medium
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to a confidential disclosureCVE-2026-55155.5 Medium
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of serviceCVE-2026-44104.8 Medium
- ibm cloud apm, advanced private, cloud apm, base private, cloud application performance managemen +2 moreThere are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.CVE-2026-36766.5 Medium
- ibm netezza performance server replication servicesVulnerabilities exists in IBM Netezza Performance Server Replication ServicesCVE-2026-36237.8 High
- Show moreLoading…