IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

14 records in Lotus Connections · all components

TI-2008-04592 CVE-2008-4809 · GHSA-85rg-hv4c-5cwf

Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus…

MEDIUM 46

Multiple unspecified vulnerabilities in the Profiles search pages in IBM Lotus Connections 2.x before 2.0.1 have unknown impact and attack vectors related to "Active" content.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01495 Published 2008-10-31 No fix listed

TI-2010-02188 CVE-2010-2279 · GHSA-r5g6-h9r4-8fp4

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x…

LOW 36

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors.

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.01265 Published 2010-06-14 No fix listed

TI-2008-04589 CVE-2008-4806 · GHSA-35pp-4j8v-5825

Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow…

LOW 35

Multiple SQL injection vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via the sortField parameter to unspecified components.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2008-10-31 No fix listed CWE-89

TI-2011-00891 CVE-2011-1032 · GHSA-qc3q-2v3g-8x48

IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does…

LOW 33

IBM Lotus Connections 3.0, when IBM WebSphere Application Server 7.0.0.11 is used, does not properly restrict access to the internal login module, which has unspecified impact and attack vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01442 Published 2011-02-14 No fix listed CWE-264

TI-2009-03307 CVE-2009-3469 · GHSA-w4hh-c225-9vx5

Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus…

LOW 26

Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03748 Published 2009-09-29 No fix listed CWE-79

TI-2008-04591 CVE-2008-4808 · GHSA-4m7f-g3v4-6vcv

IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via…

LOW 25

IBM Lotus Connections 2.x before 2.0.1 allows attackers to discover passwords via unspecified vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01043 Published 2008-10-31 No fix listed CWE-200

TI-2010-02186 CVE-2010-2277 · GHSA-5vpg-7cf5-grcm

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) create or (2) edit form in the Communities compo…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2010-06-14 No fix listed CWE-79

TI-2008-04588 CVE-2008-4805 · GHSA-388j-3575-x477

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via (1) the community title, (2) API input, and vectors related…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2008-10-31 No fix listed CWE-79

TI-2013-00422 CVE-2013-0503 · GHSA-593j-8rgh-366p

Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus…

LOW 22

Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01148 Published 2013-04-23 No fix listed CWE-79

TI-2011-00889 CVE-2011-1030 · GHSA-7359-hrf8-2wm8

Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections…

LOW 22

Cross-site scripting (XSS) vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01053 Published 2011-02-14 No fix listed CWE-79

TI-2010-02189 CVE-2010-2280 · GHSA-mmcx-qw7v-559v

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before…

LOW 22

Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, rel…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01039 Published 2010-06-14 No fix listed

TI-2010-02187 CVE-2010-2278 · GHSA-rjj8-xw42-4pvx

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before…

LOW 22

The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.01417 Published 2010-06-14 No fix listed

TI-2009-03625 CVE-2009-3816 · GHSA-32pf-5hm5-f9mf

Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01022 Published 2009-10-28 No fix listed CWE-79

TI-2008-04590 CVE-2008-4807 · GHSA-wxhf-vrqv-h872

IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in…

LOW 11

IBM Lotus Connections 2.x before 2.0.1 stores the password for the administrative user in the trace.log file, which allows local users to obtain sensitive information by reading this file.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.003 Published 2008-10-31 No fix listed CWE-255

Open these records in search →

Critical	986
High	2776
Medium	5270
Low	679
No CVSS	1