Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

18 records in Infosphere Biginsights · all components

TI-2015-01649 CVE-2015-1836 · GHSA-p8xr-4v2c-rvgp

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used…

Priority MEDIUM 42

Apache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, wh…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.07425 Published 2015-12-21 Partial fix · 0.98.12.1, 1.0.1.1 +1 CWE-284
TI-2015-01590 CVE-2015-1772 · GHSA-5gvm-hrw5-h6xf

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before…

Priority MEDIUM 42

The LDAP implementation in HiveServer2 in Apache Hive before 1.0.1 and 1.1.x before 1.1.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, mishandles simple unauthenticated and anonymo…

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.06828 Published 2015-12-21 Fixed in 1.0.1, 1.1.1 CWE-287
TI-2015-01697 CVE-2015-1889 · GHSA-xr4q-6qfj-q54q

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote…

Priority LOW 32

The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-access restrictions via (1) a crafted CREATE HADOOP TABLE statement referencing the d…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01567 Published 2015-04-22 No fix listed CWE-89
TI-2017-01247 CVE-2017-1554 · GHSA-f62v-pgjm-g8j5

Cross-site scripting in IBM BigInsights

Priority LOW 26

IBM Infosphere BigInsights 4.2.0 and 4.2.5 could allow a remote attacker to hijack the clicking action of the victim.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00869 Published 2017-11-01 No fix listed CWE-79
TI-2017-01246 CVE-2017-1553 · GHSA-3cq6-vgfr-7f84

Cross-site scripting in IBM BigInsights

Priority LOW 26

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2017-11-01 No fix listed CWE-79
TI-2017-01245 CVE-2017-1552 · GHSA-8h8w-wc8p-r389

Cross-site scripting in IBM BigInsights

Priority LOW 26

IBM Infosphere BigInsights 4.2.0 and 4.2.5 is vulnerable to link injection.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00869 Published 2017-11-01 No fix listed CWE-79
TI-2013-03491 CVE-2013-3997 · GHSA-jg29-v3j9-f966

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere…

Priority LOW 24

Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishi…

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.00951 Published 2014-03-26 No fix listed CWE-20
TI-2017-01096 CVE-2017-1336 · GHSA-x858-rx52-6qvm

Code injection in IBM BigInsights

Priority LOW 22

IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and files.

CVSS 3.0MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00676 Published 2017-12-07 No fix listed CWE-94
TI-2013-03492 CVE-2013-3998 · GHSA-8h4m-p2hq-jw7x

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere…

Priority LOW 18

CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00772 Published 2014-03-26 No fix listed CWE-94
TI-2014-00834 CVE-2014-0905 · GHSA-7f3j-g2c7-pj76

IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA…

Priority LOW 15

IBM InfoSphere BigInsights 2.0 through 2.1.2 does not set the secure flag for the LTPA cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within…

CVSS 2.0LOW 2.9 Adjacent network No auth Interaction — EPSS 0.00532 Published 2014-08-17 No fix listed CWE-264
Open these records in search →