Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

19 records in Datacap · all components

TI-2024-26657 CVE-2024-39736 · GHSA-59f9-39vx-2r92

IBM Datacap Navigator HTTP HOST header injection

Priority MEDIUM 48

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00366 Published 2024-07-15 No fix listed CWE-644
TI-2024-26652 CVE-2024-39731 · GHSA-m4vj-pg5w-vhq6

IBM Datacap Navigator information disclosure

Priority LOW 33

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0028 Published 2024-07-15 No fix listed CWE-327
TI-2026-07592 CVE-2026-8636 · GHSA-xfpj-q55p-7h2m

Multiple Vulnerabilities in IBM Datacap

Priority LOW 32

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 allows an attacker to retrieve user passwords and cryptographic keys from memory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00198 Published 2026-06-22 No fix listed CWE-316
TI-2024-26653 CVE-2024-39732 · GHSA-4cvc-j8gf-mg3g

IBM Datacap Navigator information disclosure

Priority LOW 32

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 temporarily stores data from different environments that could be obtained by a malicious user.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00192 Published 2024-07-14 No fix listed CWE-316
TI-2024-26649 CVE-2024-39728 · GHSA-mhmp-mqjw-37rh

IBM Datacap Navigator cross-site scripting

Priority LOW 28

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00341 Published 2024-07-15 No fix listed CWE-79
TI-2026-07102 CVE-2026-8059 · GHSA-8pwc-hwv4-w6j6

Multiple Vulnerabilities in IBM Datacap

Priority LOW 27

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00236 Published 2026-06-22 No fix listed CWE-79
TI-2024-26661 CVE-2024-39741 · GHSA-969w-vh4q-cg4g

IBM Datacap Navigator directory traversal

Priority LOW 25

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to traverse directories on the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00678 Published 2024-07-15 No fix listed CWE-22
TI-2026-08441 CVE-2026-9610 · GHSA-gc5m-j868-gqpq

Multiple Vulnerabilities in IBM Datacap

Priority LOW 24

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 and IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 exposes resources or functionality that isn't linked in the UI but is accessible by directly requesting the URL, bypassing intended ac…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00259 Published 2026-06-22 No fix listed CWE-425
TI-2025-24643 CVE-2025-36027 · GHSA-87hr-fvp2-3f9p

IBM Datacap clickjacking

Priority LOW 24

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00234 Published 2025-06-28 No fix listed CWE-1021
TI-2024-26660 CVE-2024-39740 · GHSA-92h8-vfmh-w3cj

IBM Datacap Navigator information disclosure

Priority LOW 24

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 displays version information in HTTP requests that could allow an attacker to gather information for future attacks against the system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00371 Published 2024-07-15 No fix listed CWE-497
TI-2024-26659 CVE-2024-39739 · GHSA-vr9c-hjjv-gh5h

IBM Datacap Navigator server-side request forgery

Priority LOW 24

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00241 Published 2024-07-15 No fix listed CWE-918
TI-2024-26658 CVE-2024-39737 · GHSA-84m4-gh52-5mhj

IBM Datacap Navigator information disclosure

Priority LOW 24

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00358 Published 2024-07-15 No fix listed CWE-209
TI-2024-26656 CVE-2024-39735 · GHSA-jjch-jw9j-6v52

IBM Datacap Navigator cross-site scripting

Priority LOW 24

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00304 Published 2024-07-15 No fix listed CWE-79
TI-2024-26654 CVE-2024-39733 · GHSA-rf42-gqmw-5vh9

IBM Datacap Navigator information disclosure

Priority LOW 24

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 stores user credentials in plain clear text which can be read by a local user.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00144 Published 2024-07-14 No fix listed CWE-256
TI-2024-26651 CVE-2024-39730 · GHSA-vmc8-xh9x-mm66

IBM Datacap clickjacking

Priority LOW 24

IBM Datacap Navigator 9.1.7, 9.1.8, and 9.1.9 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00245 Published 2025-06-28 No fix listed CWE-451
TI-2018-01563 CVE-2018-1773 · GHSA-g4hp-fw6r-gm2q

Improper authentication in IBM Datacap

Priority LOW 23

IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication mechanisms once the initial login is completed.

CVSS 3.0MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01417 Published 2018-09-12 No fix listed CWE-287
TI-2024-26655 CVE-2024-39734 · GHSA-hwc3-h295-hhg9

IBM Datacap Navigator information disclosure

Priority LOW 20

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00233 Published 2024-07-14 No fix listed CWE-614
TI-2024-26650 CVE-2024-39729 · GHSA-f59j-xqfp-p59g

IBM Datacap Navigator information disclosure

Priority LOW 20

IBM Datacap Navigator 9.1.5, 9.1.6, 9.1.7, 9.1.8, and 9.1.9 could allow an authenticated user to obtain sensitive information from source code that could be used in further attacks against the system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00408 Published 2024-07-15 No fix listed CWE-540
TI-2025-24642 CVE-2025-36026 · GHSA-8r4j-cg5x-mv4q

IBM Datacap information disclosure

Priority LOW 19

IBM Datacap 9.1.7, 9.1.8, and 9.1.9 does not set the secure attribute on authorization tokens or session cookies.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00162 Published 2025-06-28 No fix listed CWE-614
Open these records in search →