Patchfirst
Patchfirst

Vendor

IBM

8 of 75 IBM CVEs in Patchfirst (11%) are in of vulnerabilities exploited in the wild, 2 of them used by ransomware.

CVEs
75
In CISA KEV
811%
Known ransomware use
2
Median days to KEV
545
from publication
Latest KEV listing
4 Aug 2026
Watch IBM Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • Data Risk Manager In KEV: 3 CVEs: 4
  • Planning Analytics In KEV: 1 CVEs: 2
  • Aspera Faspex In KEV: 1 CVEs: 1
  • InfoSphere BigInsights In KEV: 1 CVEs: 1
  • Langflow In KEV: 1 CVEs: 1
  • WebSphere Application Server and Server Hypervisor Edition In KEV: 1 CVEs: 1
  • Guardium Data Protection In KEV: 0 CVEs: 16
  • Langflow OSS In KEV: 0 CVEs: 9
  • DataPower Gateway 10.6CD In KEV: 0 CVEs: 8
  • DataStage on Cloud Pak for Data In KEV: 0 CVEs: 3

Top ATT&CK techniques

What attackers do with IBM CVEs
Open in ATT&CK Navigator

Counts are IBM CVEs linked to the technique. Each link’s provenance is on the CVE page.

IBM CVEs

75 CVEs, by priority
  1. CVE-2022-47986IBM Aspera Faspex Code Execution Vulnerability
    IBM · Aspera FaspexKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    >99.9%Top 0.02%
    83.7priority
  2. CVE-2026-9198IBM Langflow Code Injection Vulnerability
    IBM · LangflowKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    28.7%Top 1.9%
    79.5priority
  3. CVE-2026-7873Code Injection Vulnerability in Code Validation Endpoint
    IBM · Langflow OSSPublic exploitCritical · 9.9
    1.6%Top 25%
    73.5priority
  4. CVE-2018-1932IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the…
    IBM · API ConnectPublic exploitMedium · 4.9
    3.2%Top 12%
    71.1priority
  5. CVE-2013-3993IBM InfoSphere BigInsights Invalid Input Vulnerability
    IBM · InfoSphere BigInsightsKEVRansomwareMedium · 6.5T1190Exploit Public-Facing ApplicationT1005Data from Local System
    4.8%Top 8.1%
    70.9priority
  6. CVE-2019-4716IBM Planning Analytics Remote Code Execution Vulnerability
    IBM · Planning AnalyticsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    86.4%Top 0.26%
    69.8priority
  7. CVE-2015-7450IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
    IBM · WebSphere Application Server and Server Hypervisor EditionKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.8%Top 0.1%
    69.8priority
  8. CVE-2020-4427IBM Data Risk Manager Security Bypass Vulnerability
    IBM · Data Risk ManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    70.0%Top 0.63%
    69.7priority
  9. CVE-2020-4428IBM Data Risk Manager Remote Code Execution Vulnerability
    IBM · Data Risk ManagerKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    61.7%Top 0.83%
    69.2priority
  10. CVE-2020-4429IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 contains a default password for an IDRM…
    IBM · Data Risk ManagerPublic exploitCritical · 10.0
    72.0%Top 0.57%
    66.9priority
  11. CVE-2024-22320IBM Operational Decision Manager code execution
    IBM · Operational Decision ManagerPublic exploitCritical · 9.8
    73.4%Top 0.54%
    66.8priority
  12. CVE-2024-22319IBM Operational Decision Manager JDNI injection
    IBM · Operational Decision ManagerPublic exploitHigh · 8.1
    76.4%Top 0.46%
    65.6priority
  13. CVE-2020-4463IBM Maximo Asset Management 7.6.0.1 and 7.6.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when…
    IBM · Maximo Asset ManagementPublic exploitHigh · 8.2
    31.6%Top 1.7%
    65.4priority
  14. CVE-2020-4450IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on…
    IBM · WebSphere Application ServerCritical · 9.8
    34.7%Top 1.6%
    63.5priority
  15. CVE-2019-4061IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the…
    IBM · BigFix PlatformPublic exploitMedium · 5.3
    22.5%Top 2.3%
    63.3priority
  16. CVE-2017-1182IBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute arbitrary commands on the…
    IBM · Tivoli Monitoring V6Public exploit
    8.5%Top 4.9%
    61.5priority
  17. CVE-2020-4430IBM Data Risk Manager Directory Traversal Vulnerability
    IBM · Data Risk ManagerKEVMedium · 4.3T1190Exploit Public-Facing ApplicationT1005Data from Local System
    68.5%Top 0.66%
    60.9priority
  18. CVE-2017-1274IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an…
    IBM · DominoPublic exploit
    6.7%Top 6.1%
    58.8priority
  19. CVE-2026-93674IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper…
    IBM · Langflow OSSPublic exploitCritical · 9.8
    15.3%Top 3.2%
    33.4priority
  20. CVE-2019-4279IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system…
    IBM · WebSphere Application ServerPublic exploitCritical · 9.0
    79.9%Top 0.39%
    31.2priority
  21. CVE-2020-4280IBM QRadar SIEM 7.3 and 7.4 could allow a remote attacker to execute arbitrary commands on the system, caused by…
    IBM · QRadar SIEMPublic exploitMedium · 6.3
    68.5%Top 0.66%
    29.3priority
  22. CVE-2026-93680IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper…
    IBM · Langflow OSSPublic exploitCritical · 9.8
    2.3%Top 17%
    29.1priority
  23. CVE-2018-1612IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication…
    IBM · QRadar SIEMPublic exploitMedium · 5.8
    55.7%Top 0.96%
    28.9priority
  24. CVE-2020-4211IBM Spectrum Protect Plus 10.1.0 and 10.1.5 could allow a remote attacker to execute arbitrary code on the system
    IBM · Spectrum Protect PlusCritical · 9.8
    71.1%Top 0.6%
    26.7priority
  25. CVE-2020-4241IBM Spectrum Scale and IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote authenticated attacker to…
    IBM · Spectrum Protect PlusHigh · 7.5
    66.3%Top 0.72%
    25.1priority
  26. CVE-2017-1092IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system…
    IBM Corporation · Informix ServersPublic exploit
    75.8%Top 0.48%
    24.9priority
  27. CVE-2020-4888IBM QRadar SIEM 7.4.0 to 7.4.2 Patch 1 and 7.3.0 to 7.3.3 Patch 7 could allow a remote attacker to execute arbitrary…
    IBM · QRadar SIEMMedium · 6.3
    62.3%Top 0.82%
    24.2priority
  28. CVE-2026-78401IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a…
    IBM · Security Verify AccessCritical · 9.8
    0.8%Top 44%
    20.6priority
  29. CVE-2026-78406IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a…
    IBM · Security Verify AccessCritical · 9.8
    0.8%Top 45%
    20.4priority
  30. CVE-2018-1956IBM Security Identity Manager 6.0.0 does not require that users should have strong passwords by default, which makes…
    IBM · Security Identity ManagerMedium · 5.9
    2.0%Top 19%
    20.3priority
  31. CVE-2026-104334IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control…
    IBM · Langflow OSSCritical · 9.8
    0.7%Top 46%
    19.7priority
  32. CVE-2026-75875IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.6%Top 52%
    19.0priority
  33. CVE-2026-93675IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected…
    IBM · Langflow OSSCritical · 9.8
    0.6%Top 50%
    19.0priority
  34. CVE-2026-53709MCP Context Forge is an MCP gateway and administrative platform
    IBM · mcp-context-forgeCritical · 9.8
    0.6%Top 51%
    18.8priority
  35. CVE-2026-104339IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…
    IBM · Langflow OSSCritical · 9.8
    0.7%Top 45%
    18.5priority
  36. CVE-2026-15762IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.5%Top 55%
    18.3priority
  37. CVE-2026-90920IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control…
    IBM · Maximo AI ServiceCritical · 9.8
    0.5%Top 54%
    18.2priority
  38. CVE-2026-96119IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute…
    IBM · iCritical · 9.9
    0.5%Top 56%
    17.9priority
  39. CVE-2026-82110IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due…
    IBM · DataStage on Cloud Pak for DataCritical · 9.9
    0.5%Top 56%
    17.9priority
  40. CVE-2026-16340IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.5%Top 58%
    17.8priority
  41. CVE-2026-92559IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…
    IBM · App Connect EnterpriseCritical · 9.8
    0.5%Top 55%
    17.7priority
  42. CVE-2026-14269IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.5%Top 58%
    17.7priority
  43. CVE-2026-110186IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control…
    IBM · Langflow OSSCritical · 9.8
    0.6%Top 50%
    17.5priority
  44. CVE-2026-104317IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…
    IBM · Langflow OSSCritical · 9.8
    0.6%Top 53%
    17.0priority
  45. CVE-2026-84249IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 64%
    16.6priority
  46. CVE-2026-14991IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.4%Top 64%
    16.6priority
  47. CVE-2026-84272IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 66%
    16.3priority
  48. CVE-2026-82344IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 65%
    16.3priority
  49. CVE-2026-14502IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.4%Top 66%
    16.2priority
  50. CVE-2026-82101IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service…
    IBM · DataStage on Cloud Pak for DataCritical · 9.6
    0.4%Top 64%
    16.1priority
  51. CVE-2026-84057IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 67%
    15.9priority
  52. CVE-2026-84246IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.8priority
  53. CVE-2026-84198IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.8priority
  54. CVE-2026-84035IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.8priority
  55. CVE-2026-82895IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.8priority
  56. CVE-2026-82335IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.8priority
  57. CVE-2026-14888IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.4%Top 68%
    15.8priority
  58. CVE-2026-84058IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server)…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.4%Top 68%
    15.7priority
  59. CVE-2026-93895IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker…
    IBM · WebSphere Application Server - LibertyCritical · 9.1
    0.4%Top 66%
    15.3priority
  60. CVE-2026-82900IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper…
    IBM · Guardium Data ProtectionCritical · 9.1
    0.4%Top 68%
    15.3priority
  61. CVE-2026-18894IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component…
    IBM · Langflow OSSCritical · 9.8
    0.4%Top 63%
    14.9priority
  62. CVE-2026-19622IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due…
    IBM · Planning AnalyticsCritical · 9.8
    0.3%Top 71%
    14.7priority
  63. CVE-2026-84209IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.3%Top 74%
    14.5priority
  64. CVE-2026-14992IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.3%Top 75%
    14.3priority
  65. CVE-2026-80381IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements…
    IBM · Guardium Data ProtectionCritical · 9.8
    0.3%Top 76%
    14.2priority
  66. CVE-2026-93909IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass…
    IBM · WebSphere Application Server - LibertyCritical · 9.1
    0.3%Top 73%
    13.9priority
  67. CVE-2026-96012IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation
    IBM · Db2 Mirror for iCritical · 9.9
    0.3%Top 76%
    13.9priority
  68. CVE-2026-81932IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection
    IBM · Guardium Data ProtectionCritical · 9.8
    0.3%Top 79%
    13.7priority
  69. CVE-2026-14990IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting
    IBM · DataPower Gateway 10.6.0Critical · 9.3
    0.3%Top 76%
    13.7priority
  70. CVE-2026-95695IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass…
    IBM · WebSphere Application Server - LibertyCritical · 9.1
    0.3%Top 75%
    13.6priority
  71. CVE-2026-12665IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS…
    IBM · MQ OperatorCritical · 9.8
    0.3%Top 76%
    13.5priority
  72. CVE-2026-82334IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7…
    IBM · Guardium Data ProtectionCritical · 9.1
    0.3%Top 77%
    13.5priority
  73. CVE-2026-14988IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0…
    IBM · DataPower Gateway 10.6CDCritical · 9.8
    0.3%Top 83%
    12.9priority
  74. CVE-2026-81212IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared…
    IBM · DataStage on Cloud Pak for DataCritical · 10.0
    0.3%Top 81%
    12.7priority
  75. CVE-2020-4408The IBM QRadar Advisor 1.1 through 2.5.2 with Watson App for IBM QRadar SIEM does not adequately mask all passwords…
    IBM · Qradar AdvisorMedium · 4.2
    0.3%Top 76%
    7.7priority
↑ ↓ chooseEnter openEsc close