ibm Vulnerability Advisory Catalog

Total 8,057 security vulnerabilities recorded for ibm software and firmware.

← Back to All Vendors
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configurations where an attacker has write access to parts of the server configurat...

๐Ÿ“… 2026-05-26
CVSS 7.7 Dossier →
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client aut...

๐Ÿ“… 2026-05-26
CVSS 8.1 Dossier →
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_mem_cache....

๐Ÿ“… 2026-05-26
CVSS 7.5 Dossier →
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploi...

๐Ÿ“… 2026-05-26
CVSS 7.3 Dossier →
Component: http_server

IBM HTTP Server 8.5, and 9.0 contains a buffer overflow vulnerability. A privileged user, authenticated to the Administration Server, could exploit th...

๐Ÿ“… 2026-05-26
CVSS 8.0 Dossier →
CVE-2026-8633 CRITICAL
Component: websphere_application_server

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Ser...

๐Ÿ“… 2026-05-26
CVSS 9.8 Dossier →
Component: websphere_application_server

IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Ser...

๐Ÿ“… 2026-05-26
CVSS 7.5 Dossier →
CVE-2026-8852 MEDIUM
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_fastcgi module....

๐Ÿ“… 2026-05-26
CVSS 6.2 Dossier →
Component: http_server

IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module mod_ibm_upload....

๐Ÿ“… 2026-05-26
CVSS 7.5 Dossier →
Component: cloud_pak_for_data_system_-_cyclops

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System uses default passwords default passwords from ...

๐Ÿ“… 2026-05-26
CVSS 5.3 Dossier →
Component: cloud_pak_for_data_system_-_cyclops

IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cloud Pak for Data System is vulnerable to SQL injection. A remote attac...

๐Ÿ“… 2026-05-26
CVSS 4.3 Dossier →
Component: financial_transaction_manager_for_multiplatform

IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable...

๐Ÿ“… 2026-05-26
CVSS 5.4 Dossier →
Component: watsonx.data

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer...

๐Ÿ“… 2026-05-26
CVSS 5.4 Dossier →
Component: cognos_analytics

IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) i...

๐Ÿ“… 2026-05-26
CVSS 6.4 Dossier →
Component: webmethods_integration_server

IBM webMethods Integration (on prem) -Integration Server 10.15 through IS_10.15_Core_Fix2611.1 to IS_11.1_Core_Fix10 IBM webMethods Integration is vul...

๐Ÿ“… 2026-05-26
CVSS 5.4 Dossier →
Component: db2

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive inform...

๐Ÿ“… 2026-05-26
CVSS 5.5 Dossier →
Component: turbonomic_prometurbo_agent

IBM Turbonomic prometurbo agent 8.16.0 through 8.17.6 IBM Turbonomic Application Resource Management grants excessive clusterโ€‘wide permissions, includ...

๐Ÿ“… 2026-04-30
CVSS 8.8 Dossier →
CVE-2026-2311 MEDIUM
Component: i

IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check. ย A malic...

๐Ÿ“… 2026-04-30
CVSS 6.4 Dossier →
CVE-2026-1577 MEDIUM
Component: db2

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow anย authenticated user t...

๐Ÿ“… 2026-04-30
CVSS 6.5 Dossier →
Component: watsonx.data

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.3.0, 5.3.1 stores user credentials in plain text which can be read by a local user....

๐Ÿ“… 2026-04-30
CVSS 6.2 Dossier →
Component: watsonx.data

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data be...

๐Ÿ“… 2026-04-30
CVSS 5.3 Dossier →
Component: db2

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow an authenticated user t...

๐Ÿ“… 2026-04-30
CVSS 6.5 Dossier →
Component: db2

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.3 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user t...

๐Ÿ“… 2026-04-30
CVSS 5.3 Dossier →
Component: total_storage_service_console

IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMCย could allow an unauthenticated user to execute arbitrary comman...

๐Ÿ“… 2026-04-23
CVSS 7.3 Dossier →
Page 5 of 336 (8,057 Total Records)