Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

22 records in Openpages Grc Platform · all components

TI-2017-01063 CVE-2017-1300 · GHSA-cxp8-97m5-qvpr

Cross-site request forgery in IBM OpenPages GRC Platform

Priority LOW 39

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00661 Published 2017-11-01 No fix listed CWE-352
TI-2015-00136 CVE-2015-0145 · GHSA-29hh-8jqx-6pcv

Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before…

Priority LOW 31

Cross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to hijack the authentication of…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00578 Published 2015-10-03 No fix listed CWE-352
TI-2024-23230 CVE-2024-35151 · GHSA-7c8c-x5xp-8wgj

IBM OpenPages information disclosure

Priority LOW 29

IBM OpenPages with Watson 8.3 and 9.0 could allow authenticated users access to sensitive information through improper authorization controls on APIs.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00439 Published 2024-08-22 No fix listed CWE-288
TI-2017-01093 CVE-2017-1333 · GHSA-26f3-rpp2-39rf

Information disclosure in IBM OpenPages GRC Platform

Priority LOW 27

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow an unauthenticated user to obtain sensitive information about the server that could be used in future attacks against the system.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01322 Published 2017-11-01 No fix listed CWE-200
TI-2017-00938 CVE-2017-1148 · GHSA-xpx7-q2q3-379g

Information disclosure in IBM OpenPages GRC Platform

Priority LOW 27

IBM OpenPages GRC Platform 7.2 and 7.3 with OpenPages Loss Event Entry (LEE) application could allow a user to obtain sensitive information including private APIs that could be used in further attacks against the system.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01286 Published 2017-11-01 No fix listed CWE-200
TI-2017-01055 CVE-2017-1290 · GHSA-4qpw-8cv4-jcq6

Cross-site scripting in IBM OpenPages GRC Platform

Priority LOW 26

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2017-11-01 No fix listed CWE-79
TI-2017-00937 CVE-2017-1147 · GHSA-pxmx-mc6g-fj35

Cross-site scripting in IBM OpenPages GRC Platform

Priority LOW 26

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2017-11-01 No fix listed CWE-79
TI-2016-02551 CVE-2016-3048 · GHSA-rp67-9cgj-jf2x

Cross-site scripting in IBM OpenPages GRC Platform

Priority LOW 26

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00729 Published 2017-11-01 No fix listed CWE-79
TI-2017-01314 CVE-2017-1679 · GHSA-g4wh-85fp-rqc8

Information disclosure in IBM OpenPages GRC Platform

Priority LOW 25

IBM OpenPages GRC Platform 7.2, 7.3, 7.4, and 8.0 could allow an attacker to obtain sensitive information from error log files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00369 Published 2018-09-10 No fix listed CWE-200
TI-2015-00133 CVE-2015-0142 · GHSA-4rvx-65mq-9375

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and…

Priority LOW 21

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to cause a denial of service (maintenance-mode transition and data-storage outage)…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01004 Published 2015-10-03 No fix listed CWE-264
TI-2024-18103 CVE-2024-27257 · GHSA-8j7x-j8g8-g329

IBM OpenPages information disclosure

Priority LOW 20

IBM OpenPages 8.3 and 9.0 potentially exposes information about client-side source code through use of JavaScript source maps to unauthorized users.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00306 Published 2024-09-10 No fix listed CWE-540
TI-2016-00206 CVE-2016-0234 · GHSA-g692-x4m9-j29g

Insufficient session expiration in IBM OpenPages GRC Platform

Priority LOW 19

IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 could allow a local user to obtain sensitive information when a previous user has logged out of the system but neglected to close their browser.

CVSS 3.0MEDIUM 4.0 Local No auth No interaction EPSS 0.00328 Published 2018-08-30 No fix listed CWE-613
TI-2015-00135 CVE-2015-0144 · GHSA-v975-jg56-qcg5

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00783 Published 2015-10-03 No fix listed CWE-79
TI-2014-07280 CVE-2014-8916 · GHSA-v5m6-g93j-w2qw

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to inject arbitrary web script or HTML…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00783 Published 2015-10-03 No fix listed CWE-79
Open these records in search →