Skip to contentIbm vulnerabilities
Products
Show 140 moreShow less
Newest
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a cross-site request forgeryCVE-2026-149808.3 High
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to arbitrary file write vulnerabilityCVE-2026-154359.8 Critical
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsCVE-2026-145228.8 High
- ibm app connect enterpriseIBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settingsCVE-2026-145197.5 High
- ibm enterprise build of quarkusIBM Enterprise Build of Quarkus is affected by a DoS vulnerabilityCVE-2026-163087.5 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a cross-site request forgeryCVE-2026-24823.1 Low
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgeryCVE-2026-145299.4 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by NET Misconfiguration: Use of Impersonation due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134427.1 High
- ibm cloud pak systemDue to use of IBM Storage Protect, IBM Cloud Pak System is affected by vulnerability []CVE-2026-134637.5 High
- ibm websphere application serverIBM WebSphere Application Server is affected by a privilege escalationCVE-2026-144469.8 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilitiesCVE-2026-145156.1 Medium
- ibm websphere application serverIBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive informationCVE-2026-145129.8 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by an unsafe deserialization and exposure of sensitive informationCVE-2026-145287.4 High
- ibm observability with instana (agent)IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container imageCVE-2026-148937.3 High
- ibm aspera faspex 5, aspera faspex +1 moreOS command injection in IBM Aspera FaspexCVE-2026-149589.1 Critical
- ibm aspera faspex 5, aspera faspex +1 moreOS Command Injection in IBM Aspera FaspexCVE-2026-149599.1 Critical
- ibm aspera, aspera desktop app +1 morePath Traversal in IBM Desktop AppCVE-2026-149739.3 Critical
- ibm websphere application serverIBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilitiesCVE-2026-149748.1 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerabilityCVE-2026-149767.1 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesCVE-2026-149817.5 High
- ibm aspera faspex 5, aspera faspex +1 moreMultiple vulnerabilities in IBM Aspera FaspexCVE-2026-149968.2 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a denial of service vulnerabilityCVE-2026-150577.5 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesCVE-2026-150648.7 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerabilityCVE-2026-152807.5 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilitiesCVE-2026-153258.7 High
- ibm websphere application server, websphere application server - liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty is inconsistent Interpretation of HTTP RequestsCVE-2026-153287.4 High
- ibm ts4500 cli toolTS4500 CLI tool addresses security vulnerabilityCVE-2026-161075.9 Medium
- ibm websphere application serverIBM WebSphere Application Server is affected by an authentication bypassCVE-2026-161847.0 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a denial of serviceCVE-2026-161927.1 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log fileCVE-2026-19184.9 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreSecurity Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UICVE-2026-31574.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreSecurity Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosureCVE-2026-31584.3 Medium
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +15 more +17 moreThis Power System update is being released to address Insufficient EntropyCVE-2026-49324.2 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreImproper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File GatewayCVE-2026-73624.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreSQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File GatewayCVE-2026-77698.1 High
- ibm sterling b2b integrator, sterling file gateway +1 moreCross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File GatewayCVE-2026-77755.5 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address incorrect authorizationCVE-2026-78686.5 Medium
- ibm openbmc, power system e1050 \(9043-mrx\) firmware, power system e1150 \(9043-mru\) firmware +13 more +15 moreThis Power System update is being released to address a sensitive information disclosureCVE-2026-80584.5 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization BypassCVE-2026-34825.3 Medium
- hclsoftware devops planAn information disclosure vulnerability affects HCL DevOps PlanCVE-2023-375076.9 Medium
- hclsoftware devops planHCL DevOps Plan is susceptible to a Cross-Site Scripting (XSS) vulnerabilityCVE-2023-375082.3 Low
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134458.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134469.8 Critical
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-134488.1 High
- ibm storage protect client, storage protect +1 moreIBM Storage Protect Client is vulnerable to Heap-Based Buffer OverflowCVE-2026-134738.1 High
- ibm langflow oss, langflow +1 moreLangflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpointsCVE-2026-144998.8 High
- ibm agentics, db2 genius hub +1 moreUse of Potentially Dangerous Functionthat in IBM Db2 Genius HubCVE-2026-145014.3 Medium
- ibm powervm novalinkThis PowerVM Novalink update is being released to addressCVE-2026-149713.9 Low
- ibm engineering lifecycle managementIBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attackCVE-2026-149795.3 Medium
- ibm engineering ai hubMultiple Vulnerabilities in IBM Engineering AI hub.CVE-2026-150695.4 Medium
- Show moreLoading…