Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

10 records in Watsonx.data Intelligence · all components

TI-2025-24792 CVE-2025-36327 · GHSA-32p5-27p9-f97f

Vulnerabilities found in Watson Data Intelligence

Priority LOW 29

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to bypass security controls and perform unauthorized actions due to client-side enforcement of sever-side security.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0036 Published 2026-06-30 No fix listed CWE-602
TI-2025-24787 CVE-2025-36320 · GHSA-4w8v-rh82-h7w8

Vulnerabilities found in Watson Data Intelligence

Priority LOW 28

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to stored cross-site scripting.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00257 Published 2026-06-30 No fix listed CWE-79
TI-2025-24796 CVE-2025-36336 · GHSA-jxqf-888q-rfrh

Cleartext Transmission of Sensitive Information in Watson Data Intelligence

Priority LOW 26

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00203 Published 2026-06-30 No fix listed CWE-319
TI-2025-24788 CVE-2025-36321 · GHSA-g38c-h6hm-2rqj

Vulnerabilities found in Watson Data Intelligence

Priority LOW 26

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to HTML injection.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00407 Published 2026-06-30 No fix listed CWE-80
TI-2025-11499 CVE-2025-12530 · GHSA-4h2g-pgm3-vm4c

Vulnerabilities found in Watson Data Intelligence

Priority LOW 26

IBM watsonx.data intelligence 5.2.2, 5.3.0, 5.3.1, 5.3.1 through Patch 1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00203 Published 2026-06-30 No fix listed CWE-319
TI-2025-24789 CVE-2025-36323 · GHSA-8rwq-8258-xf52

Vulnerabilities found in Watson Data Intelligence

Priority LOW 24

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 is vulnerable to cross-site scripting.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00231 Published 2026-06-30 No fix listed CWE-79
TI-2025-24794 CVE-2025-36333 · GHSA-4h2c-c5g9-52gg

Vulnerabilities found in Watson Data Intelligence

Priority LOW 20

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to perform unauthorized actions due to the improper enforcement of behavioral workflow.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00283 Published 2026-06-30 No fix listed CWE-841
TI-2025-24790 CVE-2025-36324 · GHSA-wccc-w6wf-ghf3

Vulnerabilities found in Watson Data Intelligence

Priority LOW 20

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 s vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0027 Published 2026-06-30 No fix listed CWE-918
TI-2025-24786 CVE-2025-36319 · GHSA-8g9m-mqc8-rhxx

Vulnerabilities found in Watson Data Intelligence

Priority LOW 20

IBM watsonx.data intelligence 5.2.0, 5.2.1, 5.2.2, 5.3.0 could allow an authenticated user to cause a temporary denial using a specially crafted HTTP request due to improper allocation of resource throttling.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00431 Published 2026-06-30 No fix listed CWE-770
Open these records in search →