Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

11 records in Omnifind · all components

TI-2010-03699 CVE-2010-3894 · GHSA-fpfv-m93h-jxf2

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function…

Priority MEDIUM 54

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition befor…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.1202 Published 2010-11-12 No fix listed CWE-119
TI-2010-03698 CVE-2010-3893 · GHSA-jx4v-m6x5-3c22

The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not…

Priority LOW 37

The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbitrary administrative a…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02353 Published 2010-11-12 No fix listed CWE-264
TI-2010-03696 CVE-2010-3891 · GHSA-gr45-cvr4-72f3

Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators f…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01143 Published 2010-11-12 No fix listed CWE-352
TI-2010-03703 CVE-2010-3898 · GHSA-cwwm-5pm5-mpxq

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of…

Priority LOW 26

IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pag…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01325 Published 2010-11-12 No fix listed CWE-264
Open these records in search →