Browse CVEs

MEDIUM 5.5 CVE-2026-19483 IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The … Storage Scale No fix yet Fix from $4,0002026-08-13 MEDIUM 5.5 CVE-2026-18097 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to ob… Db2 No fix yet Fix from $4,0002026-08-12 HIGH 7.5 CVE-2026-12947 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log files that coul… App Connect Enterprise 12.0.12.28 / 13.0.8.0+ Fix from $1,9502026-07-30 HIGH 7.5 CVE-2026-14528 IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information. Websphere Application Server 8.5.5.31 / 9.0.5.29+ Fix from $1,9502026-07-28 MEDIUM 5.5 CVE-2026-12086 IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2… Devops Deploy 7.2.3.24 / 7.3.2.19+ Fix from $1,6002026-06-30 MEDIUM 5.5 CVE-2026-5515 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user. App Connect Enterprise 13.0.7.1+ Fix from $1,6002026-05-27 MEDIUM 5.5 CVE-2025-13755 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes DB2 Connect Server) stores potentially sensitive infor… Db2 after 12.1.4 Fix from $1,6002026-05-26 MEDIUM 5.5 CVE-2026-4788 IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user. Tivoli Netcool\/impact 7.1.0.38+ Fix from $1,6002026-04-08 MEDIUM 5.3 CVE-2026-1265 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to writing of sensitive Information in a log file. Infosphere Information Server after 11.7.1.6 Fix from $1,6002026-03-03 MEDIUM 6.5 CVE-2025-64650 IBM Storage Defender - Resiliency Service 2.0.0 through 2.0.18 could disclose sensitive user credentials in log files. Storage Defender Resiliency Service after 2.0.18 Fix from $1,6002025-12-08 MEDIUM 5.5 CVE-2025-36144 IBM Lakehouse (watsonx.data 2.2) stores potentially sensitive information in log files that could be read by a local user. Watsonx.data Mitigation only Fix from $1,6002025-09-27 MEDIUM 5.5 CVE-2025-36133 IBM App Connect Enterprise Certified Container CD: 9.2.0 through 11.6.0, 12.1.0 through 12.14.0, and 12.0 LTS: 12.0.0 through 12.0.14stores potential… App Connect Enterprise Certified Containers Operands 12.15.0+ Fix from $1,6002025-09-01 MEDIUM 6.2 CVE-2025-36050 IBM QRadar SIEM 7.5 through 7.5.0 Update Package 12 stores potentially sensitive information in log files that could be read by a local user. Qradar Security Information And Event Manager Mitigation only Fix from $1,6002025-06-19 HIGH 7.5 CVE-2024-7577 IBM InfoSphere Information Server 11.7 could disclose sensitive user credentials from log files during new installation of the product. Infosphere Information Server 11.7.1+ Fix from $1,9502025-03-29 MEDIUM 5.5 CVE-2025-1998 IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.… Devops Deploy 7.1.2.22 / 7.2.3.15+ Fix from $1,6002025-03-27 MEDIUM 6.5 CVE-2023-38271 IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.4, 2.3.3.5, 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, and 2.3.3.7 iFix1 could allow… Cloud Pak System Mitigation only Fix from $1,6002025-01-25 MEDIUM 5.5 CVE-2024-45091 IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files… Urbancode Deploy 7.0.5.25 / 7.1.2.21+ Fix from $1,6002025-01-21 MEDIUM 5.5 CVE-2024-40679 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an information disclosure vulnerability as sensitive informat… Db2 Mitigation only Fix from $1,6002025-01-08 MEDIUM 6.5 CVE-2024-38321 IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 stores potentially sensitive information in log files under certain situations th… Business Automation Workflow after 22.0.2 Fix from $1,6002024-08-03 MEDIUM 5.5 CVE-2023-30430 IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs. IBM X-Force ID: 252183. Security Verify Access after 10.0.7.1 Fix from $1,6002024-06-27 MEDIUM 5.5 CVE-2023-40694 IBM Watson CP4D Data Stores 4.0.0 through 4.8.4 stores potentially sensitive information in log files that could be read by a local user. IBM X-Forc… Watson Cp4d Data Stores 4.8.5+ Fix from $1,6002024-05-07 MEDIUM 5.5 CVE-2023-22869 IBM Aspera Faspex 5.0.0 through 5.0.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 244… Aspera Faspex 5.0.8+ Fix from $1,6002024-04-19 MEDIUM 5.5 CVE-2024-25030 IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 stores potentially sensitive information in log files that could be read by a … Db2 Mitigation only Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-22352 IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 28… Infosphere Information Server Mitigation only Fix from $1,6002024-03-21 MEDIUM 5.5 CVE-2023-43043 IBM Maximo Application Suite - Maximo Mobile for EAM 8.10 and 8.11 could disclose sensitive information to a local user. IBM X-Force ID: 266875. Maximo Mobile For Eam Mitigation only Fix from $1,6002024-03-13 MEDIUM 5.5 CVE-2024-22335 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in lo… Cloud Pak For Security 1.10.18.0+ Fix from $1,6002024-02-17 MEDIUM 5.5 CVE-2024-22336 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in lo… Cloud Pak For Security 1.10.18.0+ Fix from $1,6002024-02-17 MEDIUM 5.5 CVE-2024-22337 IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 stores potentially sensitive information in lo… Cloud Pak For Security 1.10.18.0+ Fix from $1,6002024-02-17 MEDIUM 5.5 CVE-2023-25682 IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log file… Sterling B2b Integrator 6.0.3.9 / 6.1.2.3+ Fix from $1,6002023-11-22 HIGH 7.5 CVE-2023-26023 Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerabil… Cloud Pak For Data Patch available Fix from $1,9502023-07-19