Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

13 records in Spectrum Control · all components

TI-2019-03048 CVE-2019-4071 · GHSA-gpmw-2pfx-6xxm

CSV injection in IBM Spectrum Control Standard Edition

Priority MEDIUM 45

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of csv file con…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04302 Published 2019-05-09 No fix listed CWE-1236
TI-2016-07338 CVE-2016-8941 · GHSA-86qj-gcg9-hf8g

Cross-site request forgery in IBM Spectrum Control Standard Select Edition

Priority LOW 39

IBM Tivoli Storage Productivity Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2017-02-01 No fix listed CWE-352
TI-2022-18017 CVE-2022-38391 · GHSA-5h2v-hw8m-9rhw

IBM Spectrum Control information disclosure

Priority LOW 33

IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00293 Published 2022-12-20 No fix listed CWE-327
TI-2019-03090 CVE-2019-4138 · GHSA-q9qq-hhhc-3c8x

Insufficiently protected credentials in IBM Spectrum Control Standard Edition

Priority LOW 31

IBM Tivoli Storage Productivity Center 5.2.13 through 5.3.0.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02094 Published 2019-05-29 No fix listed CWE-522
TI-2019-03049 CVE-2019-4072 · GHSA-ffv4-58cg-f6v5

Insufficient session expiration in IBM Spectrum Control Standard Edition

Priority LOW 29

IBM Tivoli Storage Productivity Center (IBM Spectrum Control Standard Edition 5.2.1 through 5.2.17) allows users to remain idle within the application even when a user has logged out.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00797 Published 2019-05-09 No fix listed CWE-613
TI-2016-05134 CVE-2016-5944 · GHSA-jgh4-jhhw-f27m

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly…

Priority LOW 26

Cross-site scripting (XSS) vulnerability in the Web UI in IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to inject arbitrary web script or HTML vi…

CVSS 3.0MEDIUM 5.4 Network No auth User interaction EPSS 0.00816 Published 2016-09-26 No fix listed CWE-79
TI-2016-05133 CVE-2016-5943 · GHSA-h3g4-q7jg-pp54

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11…

Priority LOW 26

IBM Spectrum Control (formerly Tivoli Storage Productivity Center) 5.2.x before 5.2.11 allows remote authenticated users to bypass intended access restrictions, and read task details or edit properties, via unspecified v…

CVSS 3.0MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00865 Published 2016-09-26 No fix listed CWE-284
TI-2016-07339 CVE-2016-8942 · GHSA-mxgv-84g2-jxg6

Improper access control in IBM Spectrum Control Standard Select Edition

Priority LOW 16

IBM Tivoli Storage Productivity Center could allow an authenticated user with intimate knowledge of the system to edit a limited set of properties on the server.

CVSS 3.0LOW 3.1 Network Low privileges No interaction EPSS 0.00491 Published 2017-02-01 No fix listed CWE-284
Open these records in search →