Ibm vulnerabilities
9,366 vulnerabilities
Known vulnerabilities in Ibm products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,597 products.
Products
50 of 1,597- Aix531 vulnerabilities
- Websphere Application Server523 vulnerabilities
- Db2360 vulnerabilities
- Vios237 vulnerabilities
- I219 vulnerabilities
- Sterling B2B Integrator207 vulnerabilities
- Rational Quality Manager201 vulnerabilities
- Infosphere Information Server197 vulnerabilities
- Qradar Security Information And Event Manager192 vulnerabilities
- Maximo Asset Management185 vulnerabilities
- Rational Collaborative Lifecycle Management171 vulnerabilities
- Db2 For Linux, UNIX And Windows168 vulnerabilities
- Rational Doors Next Generation164 vulnerabilities
- Rational Team Concert147 vulnerabilities
- Powervm VIOS146 vulnerabilities
- Langflow OSS142 vulnerabilities
- Rational Engineering Lifecycle Manager141 vulnerabilities
- Security Verify Access140 vulnerabilities
- Websphere Portal126 vulnerabilities
- Security Guardium114 vulnerabilities
- Sterling File Gateway111 vulnerabilities
- MQ110 vulnerabilities
- Cognos Analytics109 vulnerabilities
- Rational Rhapsody Design Manager106 vulnerabilities
- Financial Transaction Manager103 vulnerabilities
- Qradar SIEM100 vulnerabilities
- Concert92 vulnerabilities
- Guardium Data Protection92 vulnerabilities
- Websphere Mq91 vulnerabilities
- Business Process Manager89 vulnerabilities
- Api Connect81 vulnerabilities
- Datapower Gateway81 vulnerabilities
- Rational Software Architect Design Manager81 vulnerabilities
- Lotus Domino80 vulnerabilities
- Security Key Lifecycle Manager70 vulnerabilities
- Lotus Notes69 vulnerabilities
- Urbancode Deploy67 vulnerabilities
- Db2 Universal Database66 vulnerabilities
- Security Verify Access Container65 vulnerabilities
- Smartcloud Control Desk65 vulnerabilities
- Verify Identity Access62 vulnerabilities
- Spectrum Scale59 vulnerabilities
- Verify Identity Access Container59 vulnerabilities
- Datastage On Cloud Pak For Data58 vulnerabilities
- Engineering Lifecycle Optimization56 vulnerabilities
- Security Access Manager56 vulnerabilities
- Business Automation Workflow55 vulnerabilities
- Cloud Pak For Security55 vulnerabilities
- Jazz Reporting Service55 vulnerabilities
- Mq Appliance54 vulnerabilities
CVE-2026-8355ibmcontextforge mcp gateway
EPSS score0.18%
IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.CVE-2026-109126ibmsecurity verify access+1EPSS score0.18%
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.CVE-2026-107400ibmtririga application platformEPSS score0.44%
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.CVE-2026-107366ibmlangflow ossEPSS score0.22%
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.CVE-2026-105453ibmsterling connect direct for unixEPSS score0.09%
IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.CVE-2026-19178ibmstorage ts4500 libraryEPSS score0.19%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.CVE-2025-36252ibmstorage ts4500 libraryEPSS score0.15%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.CVE-2025-36069ibmstorage ts4500 libraryEPSS score0.12%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.CVE-2025-36061ibmstorage ts4500 libraryEPSS score0.24%
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.CVE-2026-6930ibmconcertEPSS score0.17%
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.CVE-2026-15661ibmconcertEPSS score0.31%
IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files.CVE-2026-6719ibmconcertEPSS score0.42%
IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.CVE-2026-4413ibmconcertEPSS score0.27%
IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.CVE-2026-4405ibmconcertEPSS score0.16%
IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.CVE-2026-3628ibmconcertEPSS score0.33%
IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.CVE-2026-3303ibmconcertEPSS score0.26%
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.CVE-2026-1510ibmconcertEPSS score0.12%
IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.CVE-2026-1501ibmconcertEPSS score0.11%
IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.CVE-2026-4418ibmcloud pak systemEPSS score0.23%
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.CVE-2026-3295ibmcloud pak systemEPSS score0.29%
IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing malicious JavaScript which are saved within the app and later executed automatically when user views affected pages, resulting in Stored Cross‑Site Scripting (Stored XSS).