Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

9 records in Webmethods Integration · all components

TI-2026-10436 CVE-2026-12118 · GHSA-9597-g68j-5wfj

Deserialization of untrusted data in IBM webMethods Integration

Priority MEDIUM 50

IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00849 Published 2026-07-30 No fix listed CWE-502
TI-2024-30185 CVE-2024-45076 · GHSA-wwxq-g564-5hhr

IBM webMethods Integration code execution

Priority MEDIUM 44

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00547 Published 2024-09-04 No fix listed CWE-434
TI-2025-24671 CVE-2025-36072 · GHSA-62xf-7472-gxwj

IBM webMethods Integration Deserialization

Priority MEDIUM 41

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, c…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00503 Published 2025-11-20 No fix listed CWE-502
TI-2025-24656 CVE-2025-36049 · GHSA-hpm7-9wr3-ccfg

IBM webMethods Integration Sever XML external entity injection

Priority MEDIUM 41

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE) attack when processing XML data.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00649 Published 2025-06-18 No fix listed CWE-611
TI-2025-24754 CVE-2025-36202 · GHSA-hphw-v67p-v2g2

IBM webMethods Integration code execution

Priority MEDIUM 40

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument f…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00347 Published 2025-09-22 No fix listed CWE-134
TI-2024-30184 CVE-2024-45075 · GHSA-475p-8r27-f6vh

IBM webMethods Integration privilege escalation

Priority MEDIUM 40

IBM webMethods Integration 10.15 could allow an authenticated user to create scheduler tasks that would allow them to escalate their privileges to administrator due to missing authentication.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00445 Published 2024-09-04 No fix listed CWE-306
TI-2025-24655 CVE-2025-36048 · GHSA-f2qr-p7gj-3x6f

IBM webMethods Integration Sever code execution

Priority LOW 34

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privileges when handling external entities due to execution with unnecessary privileges.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0049 Published 2025-06-18 No fix listed CWE-250
TI-2024-30183 CVE-2024-45074 · GHSA-35gh-gpw3-mx2q

IBM webMethods Integration directory traversal

Priority LOW 29

IBM webMethods Integration 10.15 could allow an authenticated user to traverse directories on the system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00481 Published 2024-09-04 No fix listed CWE-22
TI-2025-24647 CVE-2025-36037 · GHSA-7gj4-6p7p-2w9w

IBM webMethods Integration server-side request forgery

Priority LOW 24

IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00195 Published 2025-09-22 No fix listed CWE-918
Open these records in search →