IBM vulnerabilities, page 5
9,382 vulnerabilities
Known vulnerabilities in IBM products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,604 products.
CVE-2026-93891ibmtririga application platform
EPSS score0.33%
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw.CVE-2026-93886ibmiEPSS score0.19%
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.CVE-2026-92876ibmmaximo application suite - iot componentEPSS score0.31%
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.CVE-2026-92832ibmaspera enterprise webappsEPSS score0.07%
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information.CVE-2026-90911ibmmaximo ai serviceEPSS score0.31%
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.CVE-2026-90921ibmmaximo ai serviceEPSS score0.31%
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process.CVE-2026-90920ibmmaximo ai serviceEPSS score0.54%
IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation.CVE-2026-90912ibmmaximo ai serviceEPSS score0.31%
IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion.CVE-2026-17475ibmplanning analyticsEPSS score0.22%
IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access control.CVE-2026-17484ibmiEPSS score0.14%
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.CVE-2026-17487ibmiEPSS score0.24%
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.CVE-2026-75621ibmaspera enterprise webappsEPSS score0.12%
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account.CVE-2026-104332ibmdb2EPSS score0.10%
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query TableCVE-2026-104364ibmdb2EPSS score0.09%
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation.CVE-2026-75881ibmmaximo application suite - iot componentEPSS score0.31%
IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing certain inputs.CVE-2026-19620ibmplanning analyticsEPSS score0.34%
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.CVE-2026-19622ibmplanning analyticsEPSS score0.34%
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.CVE-2026-19627ibmplanning analyticsEPSS score0.35%
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.CVE-2026-105465ibmdb2EPSS score0.14%
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance.CVE-2026-105466ibmdb2EPSS score0.41%
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions.