IBM vulnerabilities10 known to be exploited.
IBM has 7,699 published vulnerabilities across 1,631 products in our catalogue. 10 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Aix, with 756. If you run IBM software, patch the exploited flaws first.
The most recent IBM flaw added to the known-exploited list is CVE-2022-47986, on 21 February 2023. We keep watching the known-exploited list.
Which IBM products have the most vulnerabilities?
Aix leads with 756 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which IBM vulnerabilities are being exploited?
10 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8IBM Aspera Faspex Code Execution Vulnerability
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
- 6.5IBM InfoSphere BigInsights Invalid Input Vulnerability
Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
- 9.8GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.
- 9.8IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands
- 9.8Apache Struts Remote Code Execution Vulnerability
Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
- 9.8IBM Planning Analytics Remote Code Execution Vulnerability
IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting.
- 9.8IBM Data Risk Manager Security Bypass Vulnerability
IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication.
Which IBM flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 89%CVE-2001-0797Critical
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
- 85%CVE-2004-0493Medium
The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow...
- 77%CVE-2008-2499High
Stack-based buffer overflow in the Community Services Multiplexer (aka MUX or StMux.exe) in IBM Lotus Sametime 7.5.1 CF1 and earlier, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code via a...
- 76%CVE-2007-4880Critical
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote...
- 74%CVE-1999-0128Medium
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- 74%CVE-2005-2428Medium
Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive...
- 71%CVE-2008-4828Critical
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0...
- 70%CVE-1999-0513Medium
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
- 66%CVE-2008-2240Critical
Stack-based buffer overflow in the Web Server service in IBM Lotus Domino before 7.0.3 FP1, and 8.x before 8.0.1, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code...
- 62%CVE-2009-3699Critical
Stack-based buffer overflow in libcsa.a (aka the calendar daemon library) in IBM AIX 5.x through 5.3.10 and 6.x through 6.1.3, and VIOS 2.1 and earlier, allows remote attackers to execute arbitrary code via a long...
All IBM products we track.
800 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Aixaix756 vulnerabilities81 versions
- Websphere Application Serverwebsphere_application_server438 vulnerabilities357 versions
- Db2db2294 vulnerabilities115 versions
- Rational Quality Managerrational_quality_manager202 vulnerabilities37 versions
- Maximo Asset Managementmaximo_asset_management180 vulnerabilities63 versions
- Sterling B2b Integratorsterling_b2b_integrator178 vulnerabilities56 versions
- Qradar Security Information and Event Managerqradar_security_information_and_event_manager172 vulnerabilities27 versions
- Infosphere Information Serverinfosphere_information_server161 vulnerabilities24 versions
- Rational Doors Next Generationrational_doors_next_generation153 vulnerabilities25 versions
- Rational Team Concertrational_team_concert142 vulnerabilities39 versions
- Rational Collaborative Lifecycle Managementrational_collaborative_lifecycle_management141 vulnerabilities32 versions
- Rational Engineering Lifecycle Managerrational_engineering_lifecycle_manager141 vulnerabilities31 versions
- Websphere Portalwebsphere_portal128 vulnerabilities50 versions
- Security Guardiumsecurity_guardium110 vulnerabilities21 versions
- Lotus Dominolotus_domino106 vulnerabilities94 versions
- Ii96 vulnerabilities7 versions
- Cognos Analyticscognos_analytics92 vulnerabilities46 versions
- Rational Rhapsody Design Managerrational_rhapsody_design_manager90 vulnerabilities25 versions
- Websphere Mqwebsphere_mq89 vulnerabilities116 versions
- Business Process Managerbusiness_process_manager88 vulnerabilities27 versions
- Rational Software Architect Design Managerrational_software_architect_design_manager81 vulnerabilities22 versions
- Security Verify Accesssecurity_verify_access79 vulnerabilities21 versions
- API Connectapi_connect78 vulnerabilities73 versions
- Viosvios78 vulnerabilities132 versions
This directory lists the 800 IBM products with at least one tracked version, of 1,631 in our catalogue.
Running IBM? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.
- Matched to
- I on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 7,699 published vulnerabilities across 1,631 products and 15,017 versions from IBM. The most recent IBM flaw added to the known-exploited list is CVE-2022-47986, on 21 February 2023.
10 IBM vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2022-47986, CVE-2013-3993 and CVE-2014-7169. The full list is on this page.
Aix, with 756 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the IBM products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.