Read the docs

IBM

Records9712All Threatist records
Exploited (KEV)11In CISA KEV
CVSS critical986CVSS 9.0–10.0
CVSS high2776CVSS 7.0–8.9

Exploited now

IBM records in CISA KEV
TI-2026-08085 IBM Langflow Code Injection Vulnerability Priority CRITICAL 100KEV 2026-08-04TI-2022-23774 IBM Aspera Faspex Code Execution Vulnerability Priority CRITICAL 100KEV 2023-02-21TI-2013-03488 IBM InfoSphere BigInsights Invalid Input Vulnerability Priority CRITICAL 88KEV 2022-05-25TI-2014-05157 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2014-05975 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Priority CRITICAL 100KEV 2022-01-28TI-2015-06198 IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Aix 545 records CRITICAL Websphere Application Server 503 records CRITICAL Db2 351 records HIGH Vios 237 records HIGH I 208 records HIGH Sterling B2b Integrator 204 records CRITICAL Rational Quality Manager 202 records MEDIUM Qradar Security Information And Event Manager 192 records CRITICAL

Records

19 records in Websphere Service Registry And Repository · all components

TI-2014-05105 CVE-2014-6187 · GHSA-8g7r-fpwr-v4xx

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service…

Priority LOW 28

Multiple cross-site request forgery (CSRF) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x before 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote a…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.00866 Published 2014-12-24 No fix listed CWE-352
TI-2009-02623 CVE-2009-2750 · GHSA-vxgc-3h52-vgxp

IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the…

Priority LOW 27

IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access via a property query.

CVSS 2.0MEDIUM 5.5 Network Low privileges Interaction — EPSS 0.00956 Published 2010-02-04 No fix listed CWE-16
TI-2010-02534 CVE-2010-2644 · GHSA-xw9f-r7rv-2cfw

IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly…

Priority LOW 25

IBM WebSphere Service Registry and Repository (WSRR) 7.0.0 before FP1 does not properly implement access control, which allows remote attackers to perform governance actions via unspecified API requests to an EJB interfa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01186 Published 2010-12-22 No fix listed CWE-264
TI-2014-05075 CVE-2014-6153 · GHSA-xvg7-vc3x-xhhw

The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5…

Priority LOW 24

The Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 does not set the secure flag for a co…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02049 Published 2014-12-24 No fix listed CWE-310
TI-2014-05077 CVE-2014-6155 · GHSA-3fmg-4rw7-jr39

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere…

Priority LOW 23

Multiple directory traversal vulnerabilities in the ServiceRegistry UI in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5.0.1 allow remote authentica…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02424 Published 2014-12-24 No fix listed CWE-22
TI-2014-05104 CVE-2014-6186 · GHSA-8jwf-8xr2-4m38

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through…

Priority LOW 22

IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.1 allows remote authenticated users to bypass intended object-access restrict…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01805 Published 2014-12-24 No fix listed CWE-264
TI-2014-05099 CVE-2014-6181 · GHSA-9jcx-w5q5-j9gx

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not…

Priority LOW 22

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 does not perform access-control checks for contained objects, which allows remote authenticated users to obtain sensitive information via unspecif…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.0162 Published 2014-12-24 No fix listed CWE-264
TI-2014-05095 CVE-2014-6177 · GHSA-5p9v-4rcf-v892

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x…

Priority LOW 22

IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.3 does not perform access-control checks for depth-0 retrieve operations, which allows remote authenticated users to obtain…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01638 Published 2014-12-24 No fix listed CWE-264
TI-2014-02404 CVE-2014-3010 · GHSA-m44w-8hgf-c6f4

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.2, 6.3 before 6.3.0.6, 7.0 before 7.0.0.6, 7.5 before 7.5.0.5, and 8.0 before 8.0.0.3 allows remote attacke…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01161 Published 2014-05-30 No fix listed CWE-79
TI-2011-01193 CVE-2011-1357 · GHSA-x3qx-m9p3-wj5r

Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM…

Priority LOW 22

Cross-site scripting (XSS) vulnerability in agentDetect.jsp in the web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 before 6.3.0.5, 7.0 before 7.0.0.5, and 7.5 before 7.5.0.1 allows remote attackers to…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00845 Published 2011-08-11 No fix listed CWE-79
TI-2010-02856 CVE-2010-2985 · GHSA-qm35-c2g5-9372

Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and…

Priority LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3 allow remote attackers to inject arbitrary web script or HTML via (1) the searchTerm parameter to ServiceReg…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01073 Published 2010-08-09 No fix listed CWE-79
TI-2014-05106 CVE-2014-6188 · GHSA-m4r8-j5xq-9jf3

Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and…

Priority LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Service Registry and Repository (WSRR) 6.3.x before 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x before 7.5.0.3, and 8.0.x before 8.0.0.2 allow remote authent…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01543 Published 2014-12-24 No fix listed CWE-79
TI-2014-05098 CVE-2014-6180 · GHSA-f8f4-9wg3-wq2p

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 7.0.x before 7.0.0.5 and 7.5.x before 7.5.0.1 allows remote authenticated users to inject arbitrary web scrip…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01417 Published 2014-12-24 No fix listed CWE-79
TI-2014-05096 CVE-2014-6178 · GHSA-846v-5h9x-xf83

Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in the widgets in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.0.x before 8.0.0.3 allows remote authenticated users to inject arbitrary web scri…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01417 Published 2014-12-24 No fix listed CWE-79
TI-2014-05055 CVE-2014-6132 · GHSA-cqq4-rj69-j2xv

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in the Web UI in IBM WebSphere Service Registry and Repository (WSRR) 6.3 through 6.3.0.5, 7.0.x through 7.0.0.5, 7.5.x through 7.5.0.4, 8.0.x before 8.0.0.3, and 8.5.x before 8.5…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01615 Published 2014-12-24 No fix listed CWE-79
TI-2013-05537 CVE-2013-6721 · GHSA-gfjh-prwr-5vfg

Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via v…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.011 Published 2013-12-17 No fix listed CWE-79
Open these records in search →