Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

13 records in Tivoli Netcool/impact · all components

TI-2020-03651 CVE-2020-4238 · GHSA-qjfp-257r-8pw4

Cross-site request forgery in IBM Tivoli Netcool Impact

Priority LOW 39

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00532 Published 2020-03-31 No fix listed CWE-352
TI-2020-03650 CVE-2020-4237 · GHSA-279h-83gv-45m4

Cross-site request forgery in IBM Tivoli Netcool Impact

Priority LOW 39

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00532 Published 2020-03-31 No fix listed CWE-352
TI-2026-04176 CVE-2026-4788 · GHSA-58gv-j5qc-234v

Multiple Vulnerabilities affect IBM Tivoli Netcool Impact

Priority LOW 37

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.37 stores sensitive information in log files that could be read by a local user.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00118 Published 2026-04-08 No fix listed CWE-532
TI-2021-10462 CVE-2021-29794 · GHSA-6mx7-73ww-9v6x

Broken or risky cryptographic algorithm in IBM Tivoli Netcool Impact

Priority LOW 34

IBM Tivoli Netcool/Impact 7.1.0.20 and 7.1.0.21 uses an insecure SSH server configuration which enables weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0071 Published 2021-07-12 No fix listed CWE-327
TI-2020-04090 CVE-2020-4849 · GHSA-gf85-jmcw-8cmh

Open redirect in IBM Tivoli Netcool Impact

Priority LOW 29

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.19 Interim Fix 7 could allow a remote attacker to bypass security restrictions, caused by a reverse tabnabbing flaw.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00815 Published 2020-12-15 No fix listed CWE-601
TI-2019-03419 CVE-2019-4681 · GHSA-93h8-gph7-v4xr

Cross-site scripting in IBM Tivoli Netcool Impact

Priority LOW 29

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2020-03-24 No fix listed CWE-79
TI-2020-03652 CVE-2020-4239 · GHSA-3p99-v7xg-6c4p

Information disclosure through error messages in IBM Tivoli Netcool Impact

Priority LOW 28

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01757 Published 2020-03-31 No fix listed CWE-209
TI-2020-03648 CVE-2020-4235 · GHSA-7mvh-2rf6-qv32

Cross-site scripting in IBM Tivoli Netcool Impact

Priority LOW 26

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00673 Published 2020-03-31 No fix listed CWE-79
TI-2019-03350 CVE-2019-4569 · GHSA-5qr3-jx24-p6xr

Cross-site scripting in IBM Tivoli Netcool Impact

Priority LOW 25

IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.16 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2019-11-22 No fix listed CWE-79
Open these records in search →