Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

20 records in Inotes · all components

TI-2016-08092 CVE-2016-9990 · GHSA-9mfx-rmx2-gvrc

Cross-site scripting in IBM iNotes

Priority LOW 30

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01254 Published 2017-03-31 No fix listed CWE-79
TI-2017-01148 CVE-2017-1421 · GHSA-hhrc-339v-8f9g

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01054 Published 2017-12-13 No fix listed CWE-79
TI-2017-01092 CVE-2017-1332 · GHSA-56cm-xqqg-vrwh

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00977 Published 2017-07-31 No fix listed CWE-79
TI-2017-01088 CVE-2017-1327 · GHSA-j672-wh3w-pxrr

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00966 Published 2017-08-03 No fix listed CWE-79
TI-2017-01086 CVE-2017-1325 · GHSA-v5px-pfjw-g499

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00846 Published 2017-05-26 No fix listed CWE-79
TI-2016-05246 CVE-2016-6113 · GHSA-m4vc-5g7w-3x7c

Cross-site scripting in IBM Domino

Priority LOW 29

IBM Verse is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-02-01 No fix listed CWE-79
TI-2016-05103 CVE-2016-5883 · GHSA-vq37-hx4f-fg28

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01103 Published 2017-02-23 No fix listed CWE-79
TI-2016-05102 CVE-2016-5882 · GHSA-cfx5-f834-f7qp

Cross-site scripting in IBM Domino

Priority LOW 29

IBM iNotes is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-02-01 No fix listed CWE-79
TI-2016-05101 CVE-2016-5881 · GHSA-m8g6-5pcc-68g5

Cross-site scripting in IBM iNotes

Priority LOW 29

IBM iNotes is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-02-01 No fix listed CWE-79
TI-2016-02450 CVE-2016-2939 · GHSA-x84m-4xr9-22pv

Cross-site scripting in IBM Domino

Priority LOW 29

IBM iNotes is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00961 Published 2017-02-01 No fix listed CWE-79
TI-2017-01302 CVE-2017-1659 · GHSA-7hq5-3x9w-x86w

Cross-site scripting in "HCL iNotes"

Priority LOW 28

"HCL iNotes is susceptible to a Cross-Site Scripting (XSS) Vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00666 Published 2020-07-01 No fix listed CWE-79
TI-2017-00990 CVE-2017-1214 · GHSA-r833-9vv5-fhp3

Information disclosure in IBM iNotes

Priority LOW 28

IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could cause an information disclosure.

CVSS 3.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.01296 Published 2017-06-12 No fix listed CWE-200
TI-2016-05100 CVE-2016-5880 · GHSA-33rw-mh7w-x3v7

Cross-site scripting in IBM Domino

Priority LOW 26

IBM iNotes is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00717 Published 2017-02-01 No fix listed CWE-79
Open these records in search →