Browse CVEs

HIGH 7.1 CVE-2026-0977 IBM CICS Transaction Gateway for Multiplatforms 9.3 and 10.1 could allow a user to transfer or view files due to improper access controls. Cics Transaction Gateway Mitigation only Fix from $1,9502026-03-16 HIGH 7.8 CVE-2026-2713 IBM Trusteer Rapport installer 3.5.2309.290 IBM Trusteer Rapport could allow a local attacker to execute arbitrary code on the system, caused by DLL … Trusteer Rapport Mitigation only Fix from $1,9502026-03-10 MEDIUM 6.1 CVE-2025-36173 Affected Product(s)Version(s)InfoSphere Data Architect9.2.1 Infosphere Data Architect No fix yet Fix from $1,6002026-03-10 HIGH 7.5 CVE-2025-14480 IBM Aspera faspio Gateway 1.3.6 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive informati… Aspera Faspio Gateway Mitigation only Fix from $1,9502026-03-03 MEDIUM 6.5 CVE-2026-2606 IBM webMethods API Gateway (on-prem) 10.11 through 10.11_Fix3210.15 to 10.15_Fix2711.1 to 11.1_Fix7 IBM webMethods API Management (on-prem) fails to … Webmethods Api Gateway Mitigation only Fix from $1,6002026-03-03 MEDIUM 5.4 CVE-2025-13734 IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized acces… Engineering Requirements Management Doors Next Mitigation only Fix from $1,6002026-03-03 MEDIUM 5.4 CVE-2025-14289 IBM webMethods Integration Server 12.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would … Webmethods Integration Server Mitigation only Fix from $1,6002026-02-17 MEDIUM 6.5 CVE-2025-33124 IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to the incorrect calcul… Db2 Merge Backup Mitigation only Fix from $1,6002026-02-17 MEDIUM 6.5 CVE-2025-33130 IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overw… Db2 Merge Backup Mitigation only Fix from $1,6002026-02-17 MEDIUM 6.5 CVE-2025-27901 IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows is vulnerable to HTTP header injection, cause… Db2 Recovery Expert Mitigation only Fix from $1,6002026-02-17 MEDIUM 5.9 CVE-2025-27903 IBM DB2 Recovery Expert for LUW 5.5 Interim Fix 002 IBM Db2 Recovery Expert for Linux, UNIX and Windows transmits data in a cleartext communication c… Db2 Recovery Expert Mitigation only Fix from $1,6002026-02-17 HIGH 7.5 CVE-2025-13108 IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an attacker to access sensitive information in memory due to the buffer not pro… Db2 Merge Backup Mitigation only Fix from $1,9502026-02-17 MEDIUM 5.3 CVE-2023-38265 IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and 2.3.5.0 could disclose folder location information to an unauthenticated attacker that c… Cloud Pak System Mitigation only Fix from $1,6002026-02-17 MEDIUM 5.3 CVE-2023-38017 IBM Cloud Pak System is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus alt… Cloud Pak System Mitigation only Fix from $1,6002026-02-04 MEDIUM 5.3 CVE-2023-38281 IBM Cloud Pak System does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by … Cloud Pak System Mitigation only Fix from $1,6002026-02-04 HIGH 7.5 CVE-2023-38010 IBM Cloud Pak System displays sensitive information in user messages that could aid in further attacks against the system. Cloud Pak System Mitigation only Fix from $1,9502026-02-04 HIGH 8.1 CVE-2025-36094 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim… Cloud Pak For Business Automation Mitigation only Fix from $1,9502026-02-03 MEDIUM 5.4 CVE-2025-36033 IBM Engineering Lifecycle Management - Global Configuration Management 7.0.3 through 7.0.3 Interim Fix 017, and 7.1.0 through 7.1.0 Interim Fix 004 I… Engineering Lifecycle Management Mitigation only Fix from $1,6002026-02-03 MEDIUM 6.0 CVE-2025-36238 IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 could allow a local user with administ… Powervm Hypervisor Mitigation only Fix from $1,6002026-02-02 MEDIUM 5.4 CVE-2025-36436 IBM Cloud Pak for Business Automation 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 Interim… Cloud Pak For Business Automation Mitigation only Fix from $1,6002026-02-02 MEDIUM 5.4 CVE-2025-15395 IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to v… Jazz Foundation Mitigation only Fix from $1,6002026-02-02 CRITICAL 9.8 CVE-2025-36418 IBM ApplinX 11.1 is vulnerable due to a privilege escalation vulnerability due to improper verification of JWT tokens. An attacker may be able to cra… Applinx Mitigation only Fix from $2,3002026-01-20 MEDIUM 6.4 CVE-2025-36408 IBM ApplinX 11.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in … Applinx Mitigation only Fix from $1,6002026-01-20 MEDIUM 5.4 CVE-2025-36409 IBM ApplinX 11.1 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web… Applinx Mitigation only Fix from $1,6002026-01-20 MEDIUM 5.3 CVE-2025-36419 IBM ApplinX 11.1 could disclose sensitive information about server architecture that could aid in further attacks against the system. Applinx No fix yet Fix from $1,6002026-01-20 MEDIUM 5.5 CVE-2025-36058 IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 I… Business Automation Workflow Mitigation only Fix from $1,6002026-01-20 MEDIUM 5.5 CVE-2025-36059 IBM Business Automation Workflow containers 25.0.0 through 25.0.0 Interim Fix 002, 24.0.1 through 24.0.1 Interim Fix 005, and 24.0.0 through 24.0.0 I… Business Automation Workflow Mitigation only Fix from $1,6002026-01-20 HIGH 7.1 CVE-2025-36192 IBM DS8A00( R10.1) 10.10.106.0 and IBM DS8A00 ( R10.0) 10.1.3.010.2.45.0 and IBM DS8900F ( R9.4) 89.40.83.089.42.18.089.44.5.0 IBM System Storage DS8… Ds8a00 Firmware Mitigation only Fix from $1,9502025-12-26 HIGH 8.8 CVE-2025-36072 IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration… Webmethods Integration Mitigation only Fix from $1,9502025-11-20 MEDIUM 6.5 CVE-2025-36371 IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation.  A user with acce… I Mitigation only Fix from $1,6002025-11-19