IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

27 records in Java · all components

TI-2015-00164 CVE-2015-0192 · GHSA-3q8x-6m7c-5p98

Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6…

MEDIUM 56

Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 before SR2 FP11, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to gain privileges via unknown vectors rela…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04059 Published 2015-07-02 Fixed CWE-269

TI-2013-03496 CVE-2013-4002 · GHSA-7j4h-8wpf-rqfh

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime…

MEDIUM 52

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracl…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.24738 Published 2013-07-23 Partial fix · 2.12.0 CWE-112

TI-2012-04075 CVE-2012-4823 · GHSA-4837-9rvp-84f3

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

MEDIUM 50

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06864 Published 2013-01-11 Fixed

TI-2012-04074 CVE-2012-4822 · GHSA-p39h-jmg2-h2pw

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

MEDIUM 50

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Ra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2013-01-11 Partial fix

TI-2012-04073 CVE-2012-4821 · GHSA-m96x-9xwr-7g88

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier…

MEDIUM 50

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06903 Published 2013-01-11 Partial fix

TI-2013-04656 CVE-2013-5457 · GHSA-p7vj-c6jh-2j22

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0…

MEDIUM 49

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06101 Published 2013-11-24 Fixed

TI-2013-04655 CVE-2013-5456 · GHSA-qp4m-8934-3g25

The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows…

MEDIUM 49

The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside t…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06028 Published 2013-11-24 Fixed

TI-2013-04657 CVE-2013-5458 · GHSA-936c-9m2v-j9p6

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to…

MEDIUM 48

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05391 Published 2013-11-24 Fixed

TI-2012-04072 CVE-2012-4820 · GHSA-jfrg-75v5-493f

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1…

MEDIUM 48

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05086 Published 2013-01-11 Partial fix

TI-2013-02632 CVE-2013-3012 · GHSA-5924-8mpv-c4g3

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to af…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04435 Published 2013-07-23 Fixed

TI-2013-02631 CVE-2013-3011 · GHSA-rpwx-9mqf-6hwr

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04435 Published 2013-07-23 Fixed

TI-2013-02630 CVE-2013-3010 · GHSA-m9h2-5r32-9cx9

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02629 CVE-2013-3009 · GHSA-5wc9-xxxc-29xm

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0…

MEDIUM 47

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.04382 Published 2013-07-23 Fixed

TI-2013-02628 CVE-2013-3008 · GHSA-9ffq-vhwj-qwhf

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7…

MEDIUM 47

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02627 CVE-2013-3007 · GHSA-56g2-qq6q-38fh

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-02626 CVE-2013-3006 · GHSA-jq68-mm5g-r969

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7…

MEDIUM 47

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03973 Published 2013-07-23 Partial fix

TI-2013-00410 CVE-2013-0485 · GHSA-9mgm-2qr8-pxgg

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before…

MEDIUM 47

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02441 Published 2014-01-21 No fix listed

TI-2015-01722 CVE-2015-1916 · GHSA-wfg4-xgj4-pp73

Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a…

MEDIUM 44

Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vectors related to SSL/TLS and the Secure Socket Extension provider.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02696 Published 2015-07-02 No fix listed CWE-400

TI-2023-14282 CVE-2023-30441 · GHSA-2v8w-cv2x-fj9v

IBM Java information disclosure

MEDIUM 40

IBM Runtime Environment, Java Technology Edition IBMJCEPlus and JSSE 8.0.7.0 through 8.0.7.11 components could expose sensitive information using a combination of flaws and configurations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00604 Published 2023-04-29 Fixed CWE-327

TI-2013-04591 CVE-2013-5375 · GHSA-7h9x-q59m-q97v

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0…

LOW 35

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and X…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02812 Published 2013-11-24 Fixed

TI-2013-03528 CVE-2013-4041 · GHSA-x62c-8f45-jx5r

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1…

LOW 35

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02812 Published 2013-11-24 Fixed

TI-2019-03297 CVE-2019-4473 · GHSA-qh47-rvff-ggv7

Uncontrolled search path in IBM Java

LOW 34

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0045 Published 2019-08-05 No fix listed CWE-427

TI-2014-02449 CVE-2014-3068 · GHSA-24mr-4mwr-24fg

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1…

LOW 31

IBM Java Runtime Environment (JRE) 7 R1 before SR1 FP1 (7.1.1.1), 7 before SR7 FP1 (7.0.7.1), 6 R1 before SR8 FP1 (6.1.8.1), 6 before SR16 FP1 (6.0.16.1), and before 5.0 SR16 FP7 (5.0.16.7) allows attackers to obtain the…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01153 Published 2014-12-02 Fixed CWE-255

TI-2014-02447 CVE-2014-3065 · GHSA-7f48-7whf-6c52

Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2…

LOW 31

Unspecified vulnerability in IBM Java Runtime Environment (JRE) 7 R1 before SR2 (7.1.2.0), 7 before SR8 (7.0.8.0), 6 R1 before SR8 FP2 (6.1.8.2), 6 before SR16 FP2 (6.0.16.2), and before SR16 FP8 (5.0.16.8) allows local…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00559 Published 2014-12-02 Fixed CWE-94

TI-2015-01720 CVE-2015-1914 · GHSA-f6r5-5pp4-r7jw

IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0…

LOW 30

IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4, 6 before SR16 FP4, and 5.0 before SR16 FP10 allows remote attackers to bypass "permission checks" and obtain sensitive information via vectors related to the J…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04009 Published 2015-07-02 Fixed CWE-200

Open these records in search →

Critical	986
High	2776
Medium	5270
Low	679
No CVSS	1