IBM

Records9712All Threatist records

Exploited (KEV)11In CISA KEV

CVSS critical986CVSS 9.0–10.0

CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV

TI-2026-08085 IBM Langflow Code Injection Vulnerability CRITICAL 100KEV 2026-08-04 TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability CRITICAL 100KEV 2023-02-21 TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability CRITICAL 88KEV 2022-05-25 TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-01-28 TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records

Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

14 records in Websphere Datapower Xc10 Appliance Firmware · all components

TI-2014-02442 CVE-2014-3060 · GHSA-rf6q-m2cj-hr7j

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote…

MEDIUM 47

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed ObjectGrid network and capturin…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0241 Published 2014-10-02 No fix listed

TI-2014-02441 CVE-2014-3059 · GHSA-rhxj-ghh4-8h63

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower…

MEDIUM 47

Unspecified vulnerability in the Administrative Console on the IBM WebSphere DataPower XC10 appliance 2.5 allows remote attackers to obtain administrative privileges by leveraging access to an eXtreme Scale distributed O…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0241 Published 2014-10-02 No fix listed

TI-2013-04613 CVE-2013-5403 · GHSA-m852-f856-5p6q

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through…

MEDIUM 47

Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0241 Published 2013-09-27 No fix listed

TI-2013-04646 CVE-2013-5446 · GHSA-gcp6-v7cm-cr56

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly…

MEDIUM 46

The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01679 Published 2013-10-22 No fix listed

TI-2013-00494 CVE-2013-0600 · GHSA-6rw8-gjq2-3x69

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1…

MEDIUM 45

Unspecified vulnerability on IBM WebSphere DataPower XC10 Appliance devices 2.0 and 2.1 through 2.1 FP3 allows remote attackers to bypass authentication and perform administrative actions via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.02721 Published 2013-05-09 No fix listed

TI-2013-04635 CVE-2013-5428 · GHSA-q65c-33vf-fx93

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all…

LOW 35

IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.01686 Published 2013-10-22 No fix listed CWE-264

TI-2015-01700 CVE-2015-1893 · GHSA-f5jc-4c8v-j66x

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to…

LOW 33

The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequently obtain sensitive information or modify data, via unspecified vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01687 Published 2015-04-06 No fix listed CWE-264

TI-2014-02440 CVE-2014-3058 · GHSA-pxv2-28f8-q3c3

Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10…

LOW 27

Cross-site request forgery (CSRF) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that ins…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00521 Published 2014-12-11 No fix listed CWE-352

TI-2013-00418 CVE-2013-0499 · GHSA-r4rq-634f-573c

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere…

LOW 22

Cross-site scripting (XSS) vulnerability in the echo functionality on IBM WebSphere DataPower SOA appliances with firmware 3.8.2, 4.0, 4.0.1, 4.0.2, and 5.0.0 allows remote attackers to inject arbitrary web script or HTM…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01208 Published 2013-05-28 No fix listed CWE-79

TI-2014-05061 CVE-2014-6138 · GHSA-82cr-hfp2-q5c4

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote…

LOW 21

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01115 Published 2014-12-12 No fix listed CWE-200

TI-2014-05082 CVE-2014-6163 · GHSA-rvg5-rvr6-x6rv

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance…

LOW 19

Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00936 Published 2014-12-11 No fix listed CWE-79

TI-2016-02409 CVE-2016-2870 · GHSA-crxh-xh77-8m2q

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows…

LOW 17

Buffer overflow in the CLI on IBM WebSphere DataPower XC10 appliances 2.1 and 2.5 allows remote authenticated users to cause a denial of service via unspecified vectors.

CVSS 3.0LOW 2.7 Network High privileges No interaction EPSS 0.01712 Published 2016-07-02 No fix listed CWE-119

TI-2015-01772 CVE-2015-1970 · GHSA-4w9q-747g-jf2q

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4…

LOW 11

The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physically proximate attackers to obtain sensitive information by extracting a card and…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00329 Published 2015-08-03 No fix listed CWE-200

TI-2014-05065 CVE-2014-6143 · GHSA-qjp4-gh5v-q64p

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to…

LOW 11

The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.0033 Published 2014-12-11 No fix listed CWE-200

Open these records in search →