Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

8 records in Tivoli Netcool/omnibus · all components

TI-2020-03621 CVE-2020-4198 · GHSA-7678-jffh-g884

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

Priority LOW 25

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2020-03-03 No fix listed CWE-79
TI-2020-03619 CVE-2020-4196 · GHSA-6x3p-68p4-c4vg

Cross-site scripting in IBM Tivoli Netcool/OMNIbus

Priority LOW 25

IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00561 Published 2020-03-03 No fix listed CWE-79
TI-2020-03622 CVE-2020-4199 · GHSA-mqfv-m9fv-vv27

Cross-site request forgery in IBM Tivoli Netcool/OMNIbus

Priority LOW 21

IBM Tivoli Netcool/OMNIbus 8.1.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00494 Published 2020-03-18 No fix listed CWE-352
TI-2014-02419 CVE-2014-3032 · GHSA-xh9r-fpvc-x582

Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in the Web GUI in IBM Tivoli Netcool/OMNIbus 7.3.0 before 7.3.0.6, 7.3.1 before 7.3.1.7, and 7.4.0 before 7.4.0.3 allows remote authenticated users to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00759 Published 2015-01-17 No fix listed CWE-79
TI-2014-00864 CVE-2014-0942 · GHSA-8c56-63ww-m49v

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00759 Published 2014-05-01 No fix listed CWE-79
TI-2014-00863 CVE-2014-0941 · GHSA-wp96-xw4p-xpfc

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web…

Priority LOW 18

Cross-site scripting (XSS) vulnerability in webtop/eventviewer/eventViewer.jsp in the Web GUI in IBM Netcool/OMNIbus 7.4.0 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00759 Published 2014-05-01 No fix listed CWE-79
Open these records in search →