Ibm vulnerabilities
Published CVEs affecting Ibm products: 1609 record(s), with severity, exploitation and fixes.
I 162Aix 159Vios 156PowerVM VIOS 145Langflow OSS 142Guardium Data Protection 90Websphere Application Server 89Db2 69Security Verify Access 62Verify Identity Access 62Concert 62Verify Identity Access Container 59Security Verify Access Container 58Datastage On Cloud Pak For Data 57WebSphere Application Server - Liberty 47Financial Transaction Manager (FTM) for RedHat OpenShift 47Financial Transaction Manager 46DataPower Gateway 10.6.0 43Datapower Gateway 43DataPower Gateway 10.5.0 42DataPower Gateway 10.6CD 41DataPower Gateway 11.0.0 41Power System E1180 (9080-heu) Firmware 36Power System E1080 (9080-hex) Firmware 35Power System S1024 (9105-42a) Firmware 32Power System L1124 (9856-42h) Firmware 32Power System S1022s (9105-22b) Firmware 32Power System L1022 (9786-22h) Firmware 32Power System L1122 (9856-22h) Firmware 32Power System L1024 (9786-42h) Firmware 32Power System S1122 (9824-22a) Firmware 32Power System E1150 (9043-mru) Firmware 32Power System S1014 (9105-41b) Firmware 32Power System S1022 (9105-22a) Firmware 32Power System E1050 (9043-mrx) Firmware 32Power System S1012 (9028-21b) Firmware 32Power System S1124 (9824-42a) Firmware 32Power System S1122s (9824-22b) Firmware 32Power System S1114 (9824-41b) Firmware 32Power System E980 (9080-m9s) Firmware 28
CVE-2026-17637
High · 8.8
CWE-502 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow an adjacent-network attacker to execute arbitrary code due to deserialization of untrusted data.
CVE-2026-17636
High · 8.8
CWE-787 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to execute arbitrary code due to improper validation of a specified quantity.
CVE-2026-17635
Critical · 9.1
CWE-306 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints.
CVE-2026-17472
Critical · 9.6
CWE-269 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to access or modify unauthorized resources due to the use of wildcards in RBAC permission definitions.
CVE-2026-17465
Medium · 6.5
CWE-400 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper enforcement of storage limits.
CVE-2026-17102
High · 8.8
CWE-78 Sep 22, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16672
High · 8.8
CWE-78 Sep 22, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-16469
High · 8.8
CWE-78 Sep 22, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-16468
High · 8.8
CWE-78 Sep 22, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to OS command injection.
CVE-2026-17620
High · 7.5
CWE-523 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift 4.0.6.0 through 4.0.6.0.0.6.0 Refresh (Operator 4.4.6+20260807.081800)4.0.7.04.0.8.04.0.9.04.0.10.0 Interim Fix 064 IBM Financial Transaction Manager transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
CVE-2026-17618
Critical · 9.8
CWE-862 Sep 22, 2026
IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote unauthenticated attacker to view and modify sensitive information and cause a denial of service due to improper authorization.
CVE-2026-16426
Medium · 6.5
CWE-918 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVE-2026-15915
Medium · 6.2
CWE-552 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.
CVE-2025-36084
Medium · 5.9
CWE-327 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
CVE-2026-16346
Critical · 9.9
CWE-285 Sep 22, 2026
DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2025-12767
Medium · 5.3
CWE-770 Sep 22, 2026
Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to cause a denial of service using a specially crafted regular expression that would cause excessive resource consumption.
CVE-2026-84241
High · 8.1
CWE-285 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization.
CVE-2026-84239
High · 7.6
CWE-89 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVE-2026-84108
High · 8.1
CWE-79 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84106
High · 8.9
CWE-79 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation.
CVE-2026-84105
High · 7.7
CWE-89 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command.
CVE-2026-84089
High · 7.8
CWE-269 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-84086
High · 7.2
CWE-22 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory.
CVE-2026-84085
High · 8.1
CWE-78 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS command.
CVE-2026-84084
High · 8.8
CWE-352 Sep 18, 2026
IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery (CSRF) vulnerability.