IBM

Products

ProductCVEsExploitedLatest
Data Risk Manager183Oct 12, 2021
Langflow OSS1761Oct 29, 2026
Aspera Faspex421Nov 7, 2026
Planning Analytics311Oct 20, 2026
API Connect235–Nov 7, 2026
AIX208–Aug 28, 2026
i206–Oct 20, 2026
PowerVM VIOS146–Aug 28, 2026
WebSphere Application Server130–Oct 13, 2026
DB2 for Linux, UNIX and Windows130–Feb 17, 2026
InfoSphere Information Server123–Jun 30, 2026
Guardium Data Protection92–Oct 20, 2026
Security Verify Access92–Oct 19, 2026
Sterling B2B Integrator86–Sep 14, 2026
WebSphere Application Server - Liberty81–Oct 13, 2026
QRadar SIEM76–Mar 19, 2026
MQ75–Nov 4, 2026
Cognos Analytics72–Sep 18, 2026
Security Guardium71–Jun 11, 2025
Security Verify Access Container65–Oct 8, 2026
Concert62–Oct 19, 2026
Verify Identity Access Container59–Oct 8, 2026
Verify Identity Access59–Oct 19, 2026
DataStage on Cloud Pak for Data58–Oct 20, 2026
Cloud Pak for Security55–Jun 3, 2025
Db253–Oct 12, 2026
Sterling File Gateway53–Sep 18, 2026
Engineering Lifecycle Optimization52–Oct 27, 2021
Rational DOORS Next Generation51–Oct 27, 2021
Engineering Workflow Management47–Jun 22, 2026
Financial Transaction Manager (FTM) for RedHat OpenShift46–Sep 23, 2026
Robotic Process Automation45–Apr 14, 2025
Rational Team Concert44–Mar 15, 2022
Rational Engineering Lifecycle Manager44–Oct 27, 2021
DataPower Gateway 10.6.043–Oct 8, 2026
Security Verify Access Docker43–Oct 6, 2025
PowerVM Hypervisor43–Oct 12, 2026
Spectrum Protect Plus43–Dec 14, 2022
Cognos Controller43–Dec 8, 2025
DataPower Gateway 10.5.042–Oct 8, 2026
DataPower Gateway 11.0.041–Oct 8, 2026
DataPower Gateway 10.6CD41–Oct 8, 2026
Rational Quality Manager40–Jul 28, 2021
Engineering Test Management39–Mar 3, 2024
Spectrum Scale38–Dec 14, 2023
Maximo Asset Management37–Apr 25, 2025
UrbanCode Deploy37–Sep 2, 2025
Rational Collaborative Lifecycle Management36–Oct 27, 2021
App Connect Enterprise34–Oct 20, 2026
CICS TX Advanced33–May 8, 2025
Cloud Pak System32–Oct 19, 2026
VIOS31–Nov 13, 2025
MQ Appliance30–Nov 4, 2026
Security Verify Access Appliance30–Oct 6, 2025
Concert Software30–Oct 28, 2025
CICS TX Standard30–May 8, 2025
Planning Analytics Local30–Jul 30, 2026
Db2 Mirror for i29–Oct 12, 2026
Business Automation Workflow29–Mar 3, 2025
Security Key Lifecycle Manager29–Mar 21, 2023
Cloud Pak For Business Automation28–Sep 15, 2026
Rational Rhapsody Model Manager27–Jun 2, 2021
MQ Operator27–Oct 19, 2026
Controller24–Sep 18, 2026
Security Verify Information Queue23–Sep 10, 2025
Sterling Partner Engagement Manager23–Mar 13, 2026
Security Guardium Insights23–Jan 26, 2022
DataPower Gateway21–Nov 22, 2022
Maximo Application Suite21–Oct 12, 2026
Sterling B2B Integrator Standard Edition21–Mar 11, 2025
OpenPages with Watson20–Jul 9, 2025
TXSeries for Multiplatforms20–Apr 2, 2025
Jazz for Service Management20–Oct 31, 2025
Security Identity Governance and Intelligence20–May 19, 2022
QRadar Suite Software20–Jun 3, 2025
Sterling Secure Proxy19–Sep 14, 2026
Content Navigator19–Apr 2, 2026
Tivoli Netcool/OMNIbus19–Sep 20, 2021
Security Verify Governance19–Jun 6, 2025
Aspera Console18–Mar 13, 2026
Spectrum Copy Data Management17–Aug 27, 2023
Aspera Shares17–Apr 1, 2026
Datacap Navigator17–Jun 22, 2026
i2 Analyst's Notebook17–Dec 13, 2021
Rational Rhapsody Design Manager17–Jan 27, 2021
Power Systems Firmware16–Aug 19, 2026
Security Secret Server16–Sep 14, 2021
Financial Transaction Manager16–Mar 15, 2023
App Connect Enterprise Certified Container15–Feb 5, 2026
QRadar15–Oct 20, 2026
MQ Advanced container images15–Oct 19, 2026
ApplinX15–Jan 20, 2026
Engineering Lifecycle Optimization - Publishing15–Jan 4, 2025
Security Guardium Key Lifecycle Manager15–Dec 17, 2024
Db2 Genius Hub14–Nov 4, 2026
Security Verify Privilege14–Apr 16, 2024
Business Process Manager13–Dec 7, 2022
EntireX13–Feb 27, 2025
MQ for HPE NonStop13–Sep 18, 2026
PowerSC13–Feb 2, 2024
Common Licensing13–Sep 18, 2026
Robotic Process Automation for Cloud Pak12–Apr 14, 2025
Storage Defender - Resiliency Service12–Dec 8, 2025
Jazz Reporting Service12–Feb 4, 2026
Cloud Pak for Applications12–Jul 13, 2021
Integration Bus for z/OS12–Sep 4, 2026
Guardium Data Encryption12–May 10, 2022
Informix Dynamic Server12–Aug 12, 2026
watsonx.data intelligence11–Jun 30, 2026
CICS TX11–Nov 14, 2022
Cloud Pak for Automation11–Mar 5, 2024
Aspera Orchestrator11–Mar 10, 2026
DevOps Deploy11–Mar 27, 2025
Spectrum Protect Operations Center10–Jun 30, 2022
OPENBMC10–Sep 24, 2026
Jazz Team Server10–Jun 24, 2022
Curam SPM10–Jan 4, 2021
i Access Client Solutions10–Aug 13, 2026
Security Identity Manager10–Aug 30, 2022
Engineering Requirements Management DOORS Next10–Mar 3, 2026
Security Directory Integrator10–May 27, 2026
Aspera High-Speed Transfer Server10–May 27, 2026
i2 Analyst Notebook10–Oct 29, 2020
Aspera High-Speed Transfer Endpoint10–May 27, 2026
Jazz Foundation9–Feb 2, 2026
Security Verify Governance Identity Manager9–Aug 28, 2025
Security QRadar EDR9–Jun 11, 2026
TRIRIGA Application Platform9–Oct 19, 2026
Cognos Analytics Mobile9–Jul 21, 2025
HTTP Server9–May 26, 2026
QRadar WinCollect Agent9–Apr 11, 2025
Control Center8–Mar 7, 2025
Tivoli Netcool Impact8–Apr 8, 2026
UCD - IBM DevOps Deploy8–Sep 4, 2026
Storage Virtualize8–Nov 17, 2025
watsonx.data8–May 26, 2026
Secure Proxy8–Mar 15, 2024
Aspera Faspex 58–Jul 28, 2026
OpenPages8–Nov 12, 2025
Storage Scale8–Aug 13, 2026
Security Information Queue8–Apr 8, 2020
Langflow Desktop8–Jun 11, 2026
Verify Gateway (IVG)8–Jul 27, 2020
Security Verify Bridge7–Jan 23, 2025
Sterling Connect:Direct Web Services7–Apr 18, 2025
Security Verify Directory Integrator7–Jan 27, 2025
Storage TS4500 Library7–Oct 19, 2026
Spectrum Protect Server7–Jun 20, 2025
Security Verify Directory7–Jun 15, 2025
Tivoli Monitoring6–Oct 30, 2025
Cognos Command Center6–Aug 26, 2025
Cloud Pak for Data6–Sep 18, 2026
Common Cryptographic Architecture6–Feb 4, 2026
Analytics Content Hub6–Jul 10, 2025
FileNet Content Manager6–Mar 1, 2024
webMethods Integration6–Nov 20, 2025
Security Directory Suite VA6–Jun 15, 2023
Sterling Partner Engagement Manager on Cloud6–Jul 26, 2022
Transformation Extender Advanced6–Oct 6, 2025
Spectrum Virtualize6–Mar 5, 2024
Datacap6–Jun 22, 2026
Business Automation Workflow containers and traditional6–Sep 15, 2026
DB2 Recovery Expert for LUW6–Feb 17, 2026
Aspera Enterprise WebApps6–Oct 12, 2026
ContextForge MCP Gateway6–Oct 19, 2026
Engineering Lifecycle Management6–Jul 17, 2026
Aspera High-Speed Transfer Server for Cloud Pak for Integration (CP4I)5–Jun 10, 2020
Watson CP4D Data Stores5–May 7, 2024
Edge5–Sep 23, 2021
Planning Analytics Workspace5–Sep 8, 2022
UCD - IBM UrbanCode Deploy5–Sep 4, 2026
Application Gateway5–Jan 20, 2026
Engineering Requirements Quality Assistant5–Mar 18, 2022
Aspera Faspex On Demand5–Jun 10, 2020
Aspera Transfer Cluster Manager5–Jun 10, 2020
Netezza Software5–Sep 3, 2026
Maximo AI Service5–Oct 12, 2026
Aspera Shares On Demand5–Jun 10, 2020
Security QRadar SIEM5–Jun 27, 2023
Aspera Application Platform On Demand5–Jun 10, 2020
Documentation Offline5–Aug 13, 2026
WebSphere Extreme Scale5–Jun 30, 2026
Aspera Proxy Server5–Jun 10, 2020
Security Access Manager5–Jul 15, 2021
Maximo Application Suite - Location Service for Esri Component5–Oct 12, 2026
Financial Transaction Manager for SWIFT Services for Multiplatforms5–Sep 18, 2026
Aspera Streaming5–Jun 10, 2020
Sterling Connect:Express for UNIX5–Mar 4, 2024
Security Access Manager Docker5–Jun 27, 2024
Aspera Server On Demand5–Jun 10, 2020
i2 Analyze5–Jul 26, 2021
Sterling Connect:Express Adapter for Sterling B2B Integrator 5.2.05–Jan 20, 2026
Elastic Storage Server5–Mar 24, 2021
QRadar Network Security5–Jul 12, 2022
Operational Decision Manager5–Sep 4, 2026
webMethods Integration Server4–Sep 10, 2026
Enterprise Build of Quarkus4–Sep 24, 2026
Security SiteProtector System4–Jul 11, 2022
Business Automation Workflow containers4–Feb 2, 2026
Security Identity Manager Adapters4–Jun 28, 2021

Exploited and recent CVEs

  • CVE-2026-9198 Critical 9.8 Exploited Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation 28.7%
  • CVE-2022-47986 Critical 9.8 Exploited IBM Aspera Faspex code execution 100.0%
  • CVE-2020-4430 Medium 4.3 Exploited IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to downlo 68.5%
  • CVE-2020-4428 Critical 9.1 Exploited IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. 61.7%
  • CVE-2020-4427 Critical 9.0 Exploited IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafte 70.0%
  • CVE-2019-4716 Critical 10.0 Exploited IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting 86.4%
  • CVE-2026-18535 Critical 9.6 IBM API Connect Denial of Service –
  • CVE-2026-19124 Medium 6.8 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17393 Medium 5.1 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17386 High 8.1 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17384 High 8.5 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-75590 High 7.2 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19131 Medium 6.5 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19129 Medium 6.8 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19128 High 7.5 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19126 Medium 5.9 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19122 Low 3.8 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-19121 High 8.3 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-18838 Critical 9.4 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-18836 Critical 9.3 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-18689 Medium 4.3 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17428 Medium 5.0 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17411 High 7.6 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17410 Critical 9.9 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17409 Critical 9.4 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17408 Critical 9.8 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17407 High 8.5 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17406 High 8.5 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17405 High 8.8 Multiple Vulnerabilities in IBM API Connect –
  • CVE-2026-17404 High 8.5 Multiple Vulnerabilities in IBM API Connect –