Browse CVEs

CRITICAL 9.9 CVE-2026-16860 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element. I after 7.6 Fix from $5,7502026-08-12 HIGH 8.8 CVE-2026-7870 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-co… I Mitigation only Fix from $1,9502026-06-11 HIGH 7.8 CVE-2026-2713 IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL … Trusteer Rapport Mitigation only Fix from $1,9502026-03-10 HIGH 8.8 CVE-2025-36004 IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A mali… I Mitigation only Fix from $1,9502025-06-25 HIGH 7.5 CVE-2025-33122 IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for… I Mitigation only Fix from $1,9502025-06-17 HIGH 8.5 CVE-2024-55898 IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user with the capability to compile or restore a program to gain elevated privileges due to an unqualified… I Mitigation only Fix from $1,9502025-02-24 HIGH 8.8 CVE-2024-41739 IBM Cognos Dashboards 4.0.7 and 5.0.0 on Cloud Pak for Data could allow a remote attacker to perform unauthorized actions due to dependency confusion. Cognos Dashboards On Cloud Pak For Data Mitigation only Fix from $1,9502025-01-24 HIGH 7.8 CVE-2024-38330 IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A mal… I Mitigation only Fix from $1,9502024-07-08 HIGH 7.8 CVE-2024-25050 IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user… Rational Developer For I Mitigation only Fix from $1,9502024-04-28 HIGH 7.8 CVE-2024-22346 Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malici… I Patch available Fix from $1,9502024-03-14 MEDIUM 6.5 CVE-2023-27859 IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases.… Db2 after 11.5.9 Fix from $1,6002024-01-22 HIGH 7.8 CVE-2023-43064 Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malici… I Patch available Fix from $1,9502023-12-25 HIGH 7.8 CVE-2023-35897 IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments 8.1.0.0 through 8.1.19.0 could allow a local user to execute arbitrary c… Storage Protect after 8.1.19.0 Fix from $1,9502023-10-06 MEDIUM 6.7 CVE-2022-40746 IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the syste… I Access Client Solutions after 1.1.9.0 Fix from $1,6002022-11-21 MEDIUM 6.5 CVE-2020-4623 IBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the system, caused by a DLL search order hijacking flaw. … I2 Ibase Patch available Fix from $1,6002021-07-26 HIGH 7.8 CVE-2019-4588 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local user to execute arbitrary code … Db2 Mitigation only Fix from $1,9502021-05-26 HIGH 7.8 CVE-2019-4447 IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary w… Db2 High Performance Unload Load Patch available Fix from $1,9502019-08-26 HIGH 7.8 CVE-2019-4473 Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code inject… Java Mitigation only Fix from $1,9502019-08-05 HIGH 7.8 CVE-2019-4094 IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path pot… Db2 Patch available Fix from $1,9502019-03-21 HIGH 7.8 CVE-2018-1890 IBM SDK, Java Technology Edition Version 8 on the AIX platform uses absolute RPATHs which may facilitate code injection and privilege elevation by lo… Sdk Patch available Fix from $1,9502019-03-11