Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

27 records in Security Appscan · all components

TI-2016-08083 CVE-2016-9981 · GHSA-f593-4hhx-9hc7

Session fixation in IBM Security AppScan Enterprise

Priority LOW 38

IBM AppScan Enterprise Edition 9.0 contains an unspecified vulnerability that could allow an attacker to hijack a valid user's session.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01444 Published 2017-08-02 No fix listed CWE-384
TI-2016-05204 CVE-2016-6042 · GHSA-c998-93wx-vqcj

Memory corruption in IBM AppScan Enterprise

Priority LOW 37

IBM AppScan Enterprise Edition could allow a remote attacker to execute arbitrary code on the system, caused by improper handling of objects in memory.

CVSS 3.0HIGH 7.3 Local Low privileges User interaction EPSS 0.02618 Published 2017-02-01 No fix listed CWE-119
TI-2014-05048 CVE-2014-6122 · GHSA-hp43-2xcx-39hv

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7…

Priority LOW 28

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.01538 Published 2014-12-23 No fix listed CWE-264
TI-2013-04637 CVE-2013-5430 · GHSA-p96j-jxxw-g7wf

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a…

Priority LOW 27

The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by…

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.0093 Published 2013-10-28 No fix listed CWE-255
TI-2012-00682 CVE-2012-0741 · GHSA-63m8-v7w4-mcq7

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3…

Priority LOW 27

IBM Security AppScan Enterprise before 8.6.0.2 and Rational Policy Tester before 8.5.0.3 do not validate X.509 certificates during use of the Manual Explore Proxy feature, which allows man-in-the-middle attackers to spoo…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00593 Published 2012-12-28 No fix listed CWE-20
TI-2014-03946 CVE-2014-4806 · GHSA-pjxw-f6xf-rj75

The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003…

Priority LOW 24

The installation process in IBM Security AppScan Enterprise 8.x before 8.6.0.2 iFix 003, 8.7.x before 8.7.0.1 iFix 003, 8.8.x before 8.8.0.1 iFix 002, and 9.0.x before 9.0.0.1 iFix 001 on Linux places a cleartext passwor…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00264 Published 2014-08-29 No fix listed CWE-522
TI-2013-00443 CVE-2013-0531 · GHSA-whvv-8gwm-ph27

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher…

Priority LOW 24

The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive information by sniffing the n…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.00721 Published 2013-09-08 No fix listed CWE-310
TI-2013-00400 CVE-2013-0474 · GHSA-4w83-7q9j-jmfx

The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before…

Priority LOW 22

The Manual Explore browser plug-in in IBM Security AppScan Enterprise 5.6 and 8.x before 8.7 and IBM Rational Policy Tester 5.6 and 8.x before 8.5.0.4 allows remote attackers to discover test Platform Authentication cred…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01001 Published 2013-03-29 No fix listed CWE-200
TI-2013-04650 CVE-2013-5450 · GHSA-2jv5-h643-m9jp

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled…

Priority LOW 20

IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obt…

CVSS 2.0MEDIUM 4.0 Network No auth Interaction — EPSS 0.00776 Published 2013-11-13 No fix listed CWE-255
TI-2014-05047 CVE-2014-6121 · GHSA-f935-3hg6-rqm2

Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 befor…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2014-12-23 No fix listed CWE-79
Load more
Open these records in search →