IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

11 records in Intelligent Operations Center · all components

TI-2019-03043 CVE-2019-4066 · GHSA-46pf-26gp-xmxp

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated…

MEDIUM 42

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 could allow an authenciated user to create arbitrary users which could cause ID management issues and result in code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02024 Published 2019-06-07 No fix listed

TI-2019-03046 CVE-2019-4069 · GHSA-4v99-jhjf-8p4p

Unrestricted file upload in IBM Intelligent Operations Center

MEDIUM 41

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not properly validate file types, allowing an attacker to upload malicious content.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01404 Published 2019-06-07 No fix listed CWE-434

TI-2019-03263 CVE-2019-4419 · GHSA-649w-vm59-w5hc

XML external entity injection in IBM Intelligent Operations Center

MEDIUM 40

IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.02427 Published 2019-08-20 No fix listed CWE-611

TI-2019-03211 CVE-2019-4321 · GHSA-45cf-5rxq-xpqr

IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for…

LOW 36

IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 - V5.1.0.6, and IBM Water Operations for Waternamics V5.1.0 - V5.2.1.1 does not require that users shou…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01471 Published 2019-09-05 No fix listed CWE-521

TI-2019-03045 CVE-2019-4068 · GHSA-7c29-cxg2-pvwr

Missing brute-force protection in IBM Intelligent Operations Center

LOW 36

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to user enumeration, allowing an attacker to brute force into the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01484 Published 2019-06-07 No fix listed CWE-307

TI-2019-03044 CVE-2019-4067 · GHSA-3jhg-2x63-53q4

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users…

LOW 36

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01471 Published 2019-06-07 No fix listed CWE-521

TI-2019-03264 CVE-2019-4420 · GHSA-crj7-2ffg-jp2v

Information disclosure through error messages in IBM Intelligent Operations Center

LOW 28

IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive information that could aid in further attacks against the system.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00392 Published 2019-08-20 No fix listed CWE-209

TI-2020-03720 CVE-2020-4318 · GHSA-4h35-wggv-9625

Cross-site scripting in IBM Intelligent Operations Center for Emergency Management

LOW 26

IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00673 Published 2020-07-28 No fix listed CWE-79

TI-2020-03719 CVE-2020-4317 · GHSA-849g-hq59-rhj8

Cross-site scripting in IBM Intelligent Operations Center

LOW 25

IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water Operations for Waternamics are vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2020-07-28 No fix listed CWE-79

TI-2019-03047 CVE-2019-4070 · GHSA-86p3-5wp9-j3q8

Cross-site scripting in IBM Intelligent Operations Center

LOW 25

IBM Intelligent Operations Center (IOC) 5.1.0 through 5.2.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0066 Published 2019-06-07 No fix listed CWE-79

TI-2012-05164 CVE-2012-6360 · GHSA-mxq7-j96v-rx39

Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0…

LOW 22

Cross-site scripting (XSS) vulnerability in IBM Intelligent Operations Center 1.5.0 allows remote attackers to inject arbitrary web script or HTML via event data fields.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-01-18 No fix listed CWE-79

Open these records in search →

Critical	986
High	2776
Medium	5270
Low	679
No CVSS	1