Vulnerabilidades de Ibm

CVEs publicadas que afetam produtos de Ibm: 1629 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2026-13772 Crítica · 9.9 CWE-470 30/06/2026

IBM WebSphere Extreme Scale: reflexão insegura no motor OQL

IBM WebSphere Extreme Scale 8.6.1.0 até 8.6.1.6 — o mecanismo Object Query Language resolve nomes de classes fornecidos pelo atacante via Class.forName() e invoca seus construtores sem lista de permissão em três pontos distintos (SELECT NEW, literais de enum e comparadores baseados em reflexão); um atacante remoto autenticado que possa influenciar uma string de consulta OQL montada pela aplicação pode executar construtores arbitrários na JVM do WAS, e uma variante SELECT DISTINCT que usa valores plantados na grade dispara o mesmo gadget após readObject, de forma que sobrevive aos filtros de serialização JEP-290 através das fronteiras dos nós da grade

CVE-2026-13759 Alta · 8.8 CWE-502 30/06/2026

IBM WebSphere eXtreme Scale is affected by Insecure Deserilization

IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream, ObjectStreamPool$ReusableInputStream, ObjectInputStreamResolver) that install no JEP-290 class filter; when Coherence is on the classpath, multiple RCE gadget chains including RemoteConstructor.readResolve and PriorityQueue/ExtractorComparator are confirmed working, allowing a post-login attacker who can write a session attribute or a LAN-adjacent attacker on the grid replication wire to execute arbitrary code on peer WAS JVMs

CVE-2026-13449 Crítica · 9.1 CWE-611 30/06/2026

IBM Business Automation Manager Open Editions: injeção de entidade externa XML (XXE)

O IBM Business Automation Manager Open Editions 9.0.0 até 9.4.2 é vulnerável a um ataque de injeção de entidade externa XML (XXE) ao processar dados XML. Um atacante remoto poderia explorar essa vulnerabilidade para expor informações sensíveis ou consumir recursos de memória.

CVE-2026-12086 Média · 5.5 CWE-532 30/06/2026

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Insertion of Sensitive Information into Log File Vulnerability

IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy stores potentially sensitive information in log files that could be read by a local user.

CVE-2026-12085 Média · 6.5 CWE-201 30/06/2026

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptable to an Insertion of Sensitive Information Into Sent Data vulnerability

IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 IBM DevOps Deploy could disclose sensitive configurations and secrets to authenticated users in API responses that could be used in further attacks against the system.

CVE-2026-12084 Alta · 7.5 CWE-942 30/06/2026

IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to a Permissive Cross-domain Security Policy with Untrusted Domains

IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains.

CVE-2026-11906 Média · 6.5 CWE-1284 30/06/2026

IBM® Db2® federated server is vulnerable to a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns by autheticated user

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial of service due to improper neutralization of special elements in the data query logic of XMLTable-derived columns.

CVE-2026-11806 Alta · 7.5 CWE-444 30/06/2026

IBM WebSphere Application Server Liberty is affected by a an arbitrary file read vulnerability

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled.

CVE-2026-11714 Crítica · 9.8 CWE-918 30/06/2026

IBM WebSphere Application Server Liberty: SSRF no recurso apiDiscovery-1.0

O IBM WebSphere Application Server Liberty é afetado por uma vulnerabilidade de server-side request forgery com o recurso apiDiscovery-1.0 habilitado.

CVE-2026-11712 Crítica · 9.3 CWE-79 30/06/2026

XSS no sistema de ajuda do console administrativo do IBM WebSphere Application Server

O IBM WebSphere Application Server 9.0 e 8.5 é afetado por uma vulnerabilidade de cross-site scripting no sistema de ajuda do console administrativo.

CVE-2026-11708 Crítica · 9.3 CWE-79 30/06/2026

Cross-site scripting no sistema de ajuda do console administrativo do IBM WebSphere Application Server

A IBM WebSphere Application Server 9.0, e 8.5 é afetado por uma vulnerabilidade de cross-site scripting no sistema de ajuda integrado do console administrativo.

CVE-2026-11595 Alta · 7.5 CWE-22 30/06/2026

IBM WebSphere Application Server is affected by a Path Traversal vulnerability

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administrative console's integrated help system.

CVE-2026-11546 Crítica · 9.8 CWE-918 30/06/2026

IBM WebSphere Application Server Liberty: SSRF (CVE-2026-11546)

IBM WebSphere Application Server - Liberty 17.0.0.3 até 26.0.0.7 é afetado por uma vulnerabilidade de falsificação de requisição do lado do servidor (server-side request forgery) com o recurso adminCenter-1.0 habilitado.

CVE-2026-10564 Alta · 8.2 CWE-918 30/06/2026

SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.

CVE-2026-10560 Crítica · 9.1 CWE-287 30/06/2026

IBM Langflow OSS: falta de autenticação em endpoints de build (CVE-2026-10560)

IBM Langflow OSS 1.0.0 até 1.9.6 contém uma vulnerabilidade de falta de autenticação nos endpoints /api/v1/build_public_tmp/ que permite a um atacante não autenticado ler dados de eventos de build ou cancelar jobs usando um identificador de job válido, resultando em divulgação de informações e negação de serviço.

CVE-2026-10546 Média · 6.5 CWE-918 30/06/2026

DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the URL component ( src/lfx/src/lfx/components/data_source/url.py ) due to a Time-of-Check/Time-of-Use (TOCTOU) race condition that can be exploited via DNS rebinding.

CVE-2026-10140 Crítica · 9.6 CWE-639 30/06/2026

IBM Langflow OSS: reuso de clientes de API entre tenants no modo de voz (IDOR)

IBM Langflow OSS 1.0.0 até 1.10.0 modo de voz contém tratamento impróprio de estado compartilhado que permite a reutilização de clientes de API entre limites de tenants. Um atacante autenticado pode manipular o estado do cache para que requisições de outros usuários sejam processadas com credenciais incorretas de API upstream, levando a faturamento cruzado entre tenants e atribuição incorreta de responsabilidade.

CVE-2026-10134 Crítica · 10.0 Exploit público CWE-94 30/06/2026

Injeção de código no IBM Langflow OSS (CVE-2026-10134)

O IBM Langflow OSS 1.0.0 até 1.9.3 permite que um atacante leia todos os segredos disponíveis ao processo do Langflow, leia e modifique todos os flows, conversas, mensagens, uploads de arquivos e componentes salvos no banco de dados do Langflow, conecte-se a serviços internos, abuse de endpoints de metadados de nuvem, mova-se lateralmente para outros tenants na mesma instância do Langflow, e Estabeleça persistência modificando o `tool_code` de um flow público para que chamadas normais a `/api/v1/build/...` feitas por qualquer usuário reexecutem código do atacante a cada build.

CVE-2026-10129 Alta · 8.5 CWE-918 30/06/2026

SSRF via HTTP Redirect Following in Langflow API Request Component

IBM Langflow OSS 1.0.0 through 1.9.3 contains a Server-Side Request Forgery (SSRF) protection bypass vulnerability in the API Request component. An authenticated attacker with low-level privileges (flow author role) can bypass SSRF protections by enabling the follow_redirects parameter and supplying a public URL that redirects to internal/localhost addresses. The vulnerability exists because the application validates only the initial URL but does not re-validate redirect destinations. This allows attackers to access internal HTTP services, localhost endpoints, cloud metadata services, and private network resources that should be unreachable when SSRF protection is enabled. Successful exploitation can lead to disclosure of sensitive information including credentials, tokens, internal API responses, and administrative panel data.

CVE-2026-10109 Crítica · 9.8 CWE-94 30/06/2026

IBM Db2: Execução Remota de Código via Handshake DRDA Pré-Autenticação (CVE-2026-10109)

O IBM Db2 11.5.0 até 11.5.9, e 12.1.0 até 12.1.4 é vulnerável a execução remota de código devido ao tratamento inadequado do handshake DRDA pré-autenticação.

CVE-2025-36372 Média · 6.5 CWE-538 30/06/2026

IBM® Db2® could disclose sensitive information to an authenticated user from the monitoring and event tables

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could disclose sensitive information to an authenticated user from the monitoring and event tables.

CVE-2026-10852 Alta · 7.5 CWE-476 22/06/2026

Websphere Application Server is Affected By a Denial of Service

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.

CVE-2026-9610 Média · 5.3 CWE-425 22/06/2026

Multiple Vulnerabilities in IBM Datacap

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended access controls.

CVE-2026-9320 Alta · 7.5 CWE-400 22/06/2026

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.

CVE-2026-9072 Crítica · 9.8 CWE-94 22/06/2026

IBM WebSphere WebServer Plug-in: injeção de código e negação de serviço

IBM WebSphere Application Server e IBM WebSphere Application Server Liberty - quando usados com Intelligent Management e o componente WebSphere WebServer Plug-in - são vulneráveis a execução remota de código e negação de serviço. Essa vulnerabilidade pode ser explorada quando um atacante se faz passar por servidores backend e envia respostas forjadas ao plug-in.