Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

8 records in Verify Gateway · all components

TI-2020-03771 CVE-2020-4385 · GHSA-5w2j-m7jf-c94r

Hard-coded credentials in IBM Verify Gateway

Priority MEDIUM 45

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encry…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01248 Published 2020-07-22 No fix listed CWE-798
TI-2020-03779 CVE-2020-4400 · GHSA-9v3j-42rv-3cwm

Missing brute-force protection in IBM Verify Gateway

Priority LOW 36

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01631 Published 2020-07-22 No fix listed CWE-307
TI-2020-03760 CVE-2020-4372 · GHSA-2f3r-62xx-976q

Insufficiently protected credentials in IBM Verify Gateway

Priority LOW 34

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 stores user credentials in plain in clear text which can be read by a local user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00287 Published 2020-07-22 No fix listed CWE-522
TI-2020-03777 CVE-2020-4397 · GHSA-3mgr-6m8w-82f4

Cleartext transmission of sensitive information in IBM Verify Gateway

Priority LOW 27

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 transmits sensitive information in plain text which could be obtained by an attacker using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00646 Published 2020-07-22 No fix listed CWE-319
TI-2020-03780 CVE-2020-4405 · GHSA-57qf-p627-66hm

Sensitive information in log files in IBM Verify Gateway

Priority LOW 22

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 could disclose potentially sensitive information to an authenticated user due to world readable log files.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00922 Published 2020-07-27 No fix listed CWE-532
TI-2020-03759 CVE-2020-4371 · GHSA-fhfv-jf9p-qv4g

Insecure storage of sensitive information in IBM Verify Gateway

Priority LOW 16

IBM Verify Gateway (IVG) 1.0.0 and 1.0.1 contains sensitive information in leftover debug code that could be used aid a local user in further attacks against the system.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00307 Published 2020-07-22 No fix listed CWE-922
Open these records in search →