Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Priority MEDIUM 41

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00747 Published 2026-08-12 No fix listed CWE-250
Priority LOW 20

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00447 Published 2026-08-12 No fix listed CWE-20
Priority LOW 28

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00369 Published 2026-08-12 No fix listed CWE-78
Priority LOW 20

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00345 Published 2026-08-12 No fix listed CWE-89
Priority LOW 29

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00418 Published 2026-08-12 No fix listed CWE-89
Priority LOW 39

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00297 Published 2026-08-12 No fix listed CWE-89