Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

13 records in Marketing Platform · all components

TI-2016-05245 CVE-2016-6112 · GHSA-63qr-c54j-6569

Access control flaw in IBM Marketing Platform

Priority MEDIUM 40

IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and gain administrative permissions over the web application.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01015 Published 2017-05-22 No fix listed CWE-264
TI-2018-01672 CVE-2018-1920 · GHSA-q2v2-62r4-p3m4

XML external entity injection in IBM Marketing Platform

Priority LOW 36

IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.02404 Published 2018-12-07 No fix listed CWE-611
TI-2018-01310 CVE-2018-1424 · GHSA-43m3-2gf4-gx9r

XML external entity injection in IBM Marketing Platform

Priority LOW 36

IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.

CVSS 3.0HIGH 7.1 Network Low privileges No interaction EPSS 0.02404 Published 2018-12-07 No fix listed CWE-611
TI-2016-00226 CVE-2016-0255 · GHSA-fqjw-66q8-mph5

Cross-site scripting in IBM Marketing Platform

Priority LOW 29

IBM Marketing Platform 9.1 and 10.0 is vulnerable to stored cross-site scripting, caused by improper validation of user-supplied input.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00925 Published 2017-05-05 No fix listed CWE-79
TI-2016-00200 CVE-2016-0228 · GHSA-qrpp-3cgc-4jff

Open redirect in IBM Marketing Platform

Priority LOW 25

IBM Marketing Platform 10.0 could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability in various scripts.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00646 Published 2017-04-17 No fix listed CWE-601
TI-2017-00906 CVE-2017-1107 · GHSA-hcfv-65gf-h2wv

Information disclosure in IBM Marketing Platform

Priority LOW 23

IBM Marketing Platform 9.1.0, 9.1.2, 10.0, and 10.1 exposes sensitive information in the headers that could be used by an authenticated attacker in further attacks against the system.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01327 Published 2019-06-19 No fix listed CWE-200
Open these records in search →