Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

10 records in Aspera High-speed Transfer Endpoint · all components

TI-2026-07197 CVE-2026-8175 · GHSA-gwr3-hqj9-gxmf

Multiple vulnerabilities in Aspera applications.

Priority MEDIUM 50

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0058 Published 2026-05-27 No fix listed CWE-122
TI-2020-03800 CVE-2020-4433 · GHSA-rvhr-3g33-gx99

Improper input validation in IBM Aspera Faspex On Demand

Priority MEDIUM 41

Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.05261 Published 2020-06-10 No fix listed CWE-20
TI-2026-07201 CVE-2026-8179 · GHSA-mf5h-x3qw-xr56

Multiple vulnerabilities in Aspera applications.

Priority MEDIUM 40

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a buffer overflo…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00401 Published 2026-05-27 No fix listed CWE-121
TI-2026-07202 CVE-2026-8180 · GHSA-fqw5-w9px-94f7

Multiple vulnerabilities in Aspera applications.

Priority LOW 39

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential deni…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00319 Published 2026-05-27 No fix listed CWE-476
TI-2020-03799 CVE-2020-4432 · GHSA-rh96-qpcc-23m2

Command injection in IBM Aspera Streaming

Priority LOW 39

Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.03423 Published 2020-06-10 No fix listed CWE-77
TI-2020-03803 CVE-2020-4436 · GHSA-9vrg-pr26-w94g

Buffer overflow in IBM Aspera Faspex On Demand

Priority LOW 38

Certain IBM Aspera applications are vulnerable to buffer overflow after valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code through a service.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.03093 Published 2020-06-10 No fix listed CWE-120
TI-2020-03801 CVE-2020-4434 · GHSA-j722-5q2w-hxrg

Buffer overflow in IBM Aspera Shares On Demand

Priority LOW 38

Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to execute arbitrary code…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.02604 Published 2020-06-10 No fix listed CWE-120
TI-2020-03802 CVE-2020-4435 · GHSA-m3fx-xfxm-w2qv

Out-of-bounds write in IBM Aspera Transfer Cluster Manager

Priority LOW 36

Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitrary code or perform a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01616 Published 2020-06-10 No fix listed CWE-787
TI-2026-07942 CVE-2026-9035 · GHSA-2qr9-h6wh-7p92

Multiple vulnerabilities in Aspera applications.

Priority LOW 29

IBM Aspera High-Speed Transfer Endpoint 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Server 3.7.4 through 4.4.7 Fix Pack 1 and IBM Aspera High-Speed Transfer Endpoint are affected by a potential arbi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00325 Published 2026-05-27 No fix listed CWE-22
Open these records in search →