Vulnerability index

Browse CVEs

2,257 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Cics Transaction Gateway HIGH 7.1
CVE-2026-0977

IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls.

Mitigation only
Fix from $1,950 2026-03-16
Trusteer Rapport HIGH 7.8
CVE-2026-2713

IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL …

Mitigation only
Fix from $1,950 2026-03-10
Infosphere Data Architect MEDIUM 6.1
CVE-2025-36173

Affected Product(s)Version(s)InfoSphere Data Architect9.2.1

No fix yet
Fix from $1,600 2026-03-10
Aspera Faspio Gateway HIGH 7.5
CVE-2025-14480

IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informati…

Mitigation only
Fix from $1,950 2026-03-03
Webmethods Api Gateway MEDIUM 6.5
CVE-2026-2606

IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to …

Mitigation only
Fix from $1,600 2026-03-03
Engineering Requirements Management Doors Next MEDIUM 5.4
CVE-2025-13734

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized acces…

Mitigation only
Fix from $1,600 2026-03-03
Webmethods Integration Server MEDIUM 5.4
CVE-2025-14289

IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would …

Mitigation only
Fix from $1,600 2026-02-17
Db2 Merge Backup MEDIUM 6.5
CVE-2025-33124

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calcul…

Mitigation only
Fix from $1,600 2026-02-17
Db2 Merge Backup MEDIUM 6.5
CVE-2025-33130

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overw…

Mitigation only
Fix from $1,600 2026-02-17
Db2 Recovery Expert MEDIUM 6.5
CVE-2025-27901

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, cause…

Mitigation only
Fix from $1,600 2026-02-17
Db2 Recovery Expert MEDIUM 5.9
CVE-2025-27903

IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication c…

Mitigation only
Fix from $1,600 2026-02-17
Db2 Merge Backup HIGH 7.5
CVE-2025-13108

IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not pro…

Mitigation only
Fix from $1,950 2026-02-17
Cloud Pak System MEDIUM 5.3
CVE-2023-38265

IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that c…

Mitigation only
Fix from $1,600 2026-02-17
Cloud Pak System MEDIUM 5.3
CVE-2023-38017

IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alt…

Mitigation only
Fix from $1,600 2026-02-04
Cloud Pak System MEDIUM 5.3
CVE-2023-38281

IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by …

Mitigation only
Fix from $1,600 2026-02-04
Cloud Pak System HIGH 7.5
CVE-2023-38010

IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system.

Mitigation only
Fix from $1,950 2026-02-04
Cloud Pak For Business Automation HIGH 8.1
CVE-2025-36094

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim…

Mitigation only
Fix from $1,950 2026-02-03
Engineering Lifecycle Management MEDIUM 5.4
CVE-2025-36033

IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 I…

Mitigation only
Fix from $1,600 2026-02-03
Powervm Hypervisor MEDIUM 6.0
CVE-2025-36238

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administ…

Mitigation only
Fix from $1,600 2026-02-02
Cloud Pak For Business Automation MEDIUM 5.4
CVE-2025-36436

IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim…

Mitigation only
Fix from $1,600 2026-02-02
Jazz Foundation MEDIUM 5.4
CVE-2025-15395

IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to v…

Mitigation only
Fix from $1,600 2026-02-02
Applinx CRITICAL 9.8
CVE-2025-36418

IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to cra…

Mitigation only
Fix from $2,300 2026-01-20
Applinx MEDIUM 6.4
CVE-2025-36408

IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in …

Mitigation only
Fix from $1,600 2026-01-20
Applinx MEDIUM 5.4
CVE-2025-36409

IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web…

Mitigation only
Fix from $1,600 2026-01-20
Applinx MEDIUM 5.3
CVE-2025-36419

IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system.

No fix yet
Fix from $1,600 2026-01-20
Business Automation Workflow MEDIUM 5.5
CVE-2025-36058

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 I…

Mitigation only
Fix from $1,600 2026-01-20
Business Automation Workflow MEDIUM 5.5
CVE-2025-36059

IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 I…

Mitigation only
Fix from $1,600 2026-01-20
Ds8a00 Firmware HIGH 7.1
CVE-2025-36192

IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8…

Mitigation only
Fix from $1,950 2025-12-26
Webmethods Integration HIGH 8.8
CVE-2025-36072

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration…

Mitigation only
Fix from $1,950 2025-11-20
I MEDIUM 6.5
CVE-2025-36371

IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation.  A user with acce…

Mitigation only
Fix from $1,600 2025-11-19