Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

12 records

Priority LOW 35

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.002 Published 2026-08-12 No fix listed CWE-94
Priority LOW 35

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00205 Published 2026-08-12 No fix listed CWE-78
TI-2026-06844 CVE-2026-7770 · GHSA-rm3f-295w-c3mc

Injection in IBM i Access Family

Priority MEDIUM 40

IBM i Access Family 1.1.5.0 through 1.1.9.12 IBM i Access Client Solutions (ACS) is vulnerable to remote code execution when configured to listen for requests from IBM i Navigator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00449 Published 2026-06-01 No fix listed CWE-74
Priority LOW 26

IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to poin…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00573 Published 2024-02-09 No fix listed CWE-327
TI-2023-24197 CVE-2023-45185 · GHSA-r5pw-wrg5-wrfp

IBM i Access Client Solutions code execution

Priority MEDIUM 40

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to execute remote code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0099 Published 2023-12-14 No fix listed CWE-863
Priority LOW 33

IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 is vulnerable to having its key for an encrypted password decoded.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00634 Published 2023-12-14 No fix listed CWE-922
TI-2022-19374 CVE-2022-40746 · GHSA-gp43-46q6-g3r3

Command injection in IBM i

Priority LOW 34

IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability.

CVSS 3.1HIGH 7.2 Local High privileges User interaction EPSS 0.00355 Published 2022-11-21 Fixed in 1.1.4, 1.1.9.0 CWE-77