IBM
8 CVEs in CISA KEV — 2 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2022-47986 |
Aspera Faspex | — | 0.9997 | 2023-02-21 | 2023-03-14 | RW | IBM Aspera Faspex could allow a remote attacker to execute code on the system, c |
CVE-2026-9198 |
Langflow | 9.8 | 0.2866 | 2026-08-04 | 2026-08-07 | Langflow contains a code injection vulnerability that allows unauthenticated att | |
CVE-2013-3993 |
InfoSphere BigInsights | — | — | 2022-05-25 | 2022-06-15 | RW | Certain APIs within BigInsights can take invalid input that might allow attacker |
CVE-2015-7450 |
WebSphere Application Server and Server Hypervisor Edition | — | — | 2022-01-10 | 2022-07-10 | Serialized-object interfaces in certain IBM analytics, business solutions, cogni | |
CVE-2020-4430 |
Data Risk Manager | — | — | 2021-11-03 | 2022-05-03 | IBM Data Risk Manager contains a directory traversal vulnerability that could al | |
CVE-2020-4427 |
Data Risk Manager | — | — | 2021-11-03 | 2022-05-03 | IBM Data Risk Manager contains a security bypass vulnerability that could allow | |
CVE-2020-4428 |
Data Risk Manager | — | — | 2021-11-03 | 2022-05-03 | IBM Data Risk Manager contains an unspecified vulnerability which could allow a | |
CVE-2019-4716 |
Planning Analytics | — | — | 2021-11-03 | 2022-05-03 | IBM Planning Analytics is vulnerable to a configuration overwrite that allows an |