Browse CVEs

HIGH 7.5 CVE-2026-13460 IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-no… Storage Scale No fix yet Fix from $4,9002026-08-13 HIGH 7.1 CVE-2026-14866 IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore. I Access Client Solutions No fix yet Fix from $4,9002026-08-12 CRITICAL 9.1 CVE-2026-12628 IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could allow a remote attacker… Storage Protect 8.2.1.1+ Fix from $2,3002026-06-22 HIGH 8.8 CVE-2026-5065 IBM Controller 11.0.1, 11.1.0, 11.1.1, and 11.1.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own… Controller 11.1.3+ Fix from $1,9502026-05-27 MEDIUM 5.5 CVE-2025-12708 IBM Concert 1.0.0 through 2.2.0 contains hard-coded credentials that could be obtained by a local user. Concert after 2.2.0 Fix from $1,6002026-03-25 CRITICAL 9.8 CVE-2025-14923 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.2 IBM WebSphere Application Server Liberty could provide weaker than expected secu… Websphere Application Server 26.0.0.3+ Fix from $2,3002026-03-03 CRITICAL 9.8 CVE-2025-33089 IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information or perform unauthorized actions due to the use of hard … Concert 2.2.0+ Fix from $2,3002026-02-17 CRITICAL 9.8 CVE-2025-36087 IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain confi… Security Verify Access after 10.0.9 Fix from $2,3002025-10-13 HIGH 7.5 CVE-2025-33100 IBM Concert Software 1.0.0 through 1.1.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun… Concert 2.0.0+ Fix from $1,9502025-08-18 HIGH 8.8 CVE-2024-52902 IBM Cognos Controller 11.0.0 through 11.0.1 FP3 and IBM Controller 11.1.0 client application contains hard coded database passwords in source code wh… Cognos Controller 11.0.1.4+ Fix from $1,9502025-02-19 MEDIUM 6.5 CVE-2024-28778 IBM Cognos Controller 11.0.0 through 11.0.1 and IBM Controller 11.1.0 is vulnerable to exposure of Artifactory API keys. This vulnerability allows us… Cognos Controller after 11.0.1 Fix from $1,6002025-01-07 HIGH 7.5 CVE-2024-41777 IBM Cognos Controller 11.0.0 and 11.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own… Cognos Controller Mitigation only Fix from $1,9502024-12-03 CRITICAL 9.8 CVE-2024-49805 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses … Security Verify Access after 10.0.8 Fix from $2,3002024-11-29 CRITICAL 9.8 CVE-2024-49806 IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses … Security Verify Access after 10.0.8 Fix from $2,3002024-11-29 CRITICAL 9.8 CVE-2024-45656 IBM Flexible Service Processor (FSP) FW860.00 through FW860.B3, FW950.00 through FW950.C0, FW1030.00 through FW1030.61, FW1050.00 through FW1050.21, … Power System E1080 \(9080 Hex\) Firmware Mitigation only Fix from $2,3002024-10-29 HIGH 7.5 CVE-2024-31873 IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inbound authentication that coul… Security Verify Access after 10.0.7 Fix from $1,9502024-04-10 HIGH 7.8 CVE-2024-22313 IBM Storage Defender - Resiliency Service 2.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inb… Storage Defender Resiliency Service Patch available Fix from $1,9502024-02-10 CRITICAL 9.8 CVE-2024-23619 A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerabil… Merge Efilm Workstation after 4.2 Fix from $2,3002024-01-26 CRITICAL 9.8 CVE-2023-50948 IBM Storage Fusion HCI 2.1.0 through 2.6.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inboun… Storage Fusion Hci 2.7.1+ Fix from $2,3002024-01-08 HIGH 7.5 CVE-2023-47704 IBM Security Guardium Key Lifecycle Manager 4.3 contains plain text hard-coded credentials or other secrets in source code repository. IBM X-Force I… Security Guardium Key Lifecycle Manager 4.2.0.2+ Fix from $1,9502023-12-20 CRITICAL 9.8 CVE-2022-22466 IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe… Security Verify Governance 10.0.2+ Fix from $2,3002023-10-23 CRITICAL 9.8 CVE-2023-33836 IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe… Security Verify Governance 10.0.2+ Fix from $2,3002023-10-16 HIGH 7.5 CVE-2022-35287 IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbo… Security Verify Information Queue Patch available Fix from $1,9502022-07-25 HIGH 7.5 CVE-2020-4157 IBM QRadar Network Security 5.4.0 and 5.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbou… Qradar Network Security Patch available Fix from $1,9502022-07-12 CRITICAL 9.8 CVE-2020-4150 IBM SiteProtector Appliance 3.1.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authent… Security Siteprotector System Mitigation only Fix from $2,3002022-07-11 CRITICAL 9.8 CVE-2021-38969 IBM Spectrum Virtualize 8.2, 8.3, and 8.4 could allow an attacker to allow unauthorized access due to the reuse of support generated credentials. IBM… Spectrum Virtualize Mitigation only Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2020-4690 IBM Security Guardium 11.3 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication… Security Guardium Patch available Fix from $2,3002021-09-23 MEDIUM 6.5 CVE-2021-20537 IBM Security Verify Access Docker 10.0.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound … Security Verify Access Patch available Fix from $1,6002021-07-15 CRITICAL 9.8 CVE-2021-20426 IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication… Security Guardium Patch available Fix from $2,3002021-05-24 HIGH 7.5 CVE-2021-29691 IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authe… Security Identity Manager Patch available Fix from $1,9502021-05-20