Known Vulnerabilities for products from IBM
Listed below are 20 of the newest known vulnerabilities associated with the vendor "IBM".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by IBM can be found at device.report : IBM
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-13773 json | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated CORBA stub classes in WebSphere eXtreme Scale'... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-13772 json | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language engine resolves attacker-supplied class names vi... | Not Provided | 2026-06-30 | 2026-07-03 |
| CVE-2026-13759 json | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 ships three ObjectInputStream subclasses (WsObjectInputStream, ObjectStre... | Not Provided | 2026-06-30 | 2026-07-03 |
| CVE-2026-13449 json | IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable to an XML external entity injection (XXE) att... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-12628 json | IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0 could... | Not Provided | 2026-06-22 | 2026-06-26 |
| CVE-2026-12086 json | IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-12085 json | IBM UCD - IBM UrbanCode Deploy 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-12084 json | IBM UCD - IBM DevOps Deploy 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 uses Cross-Origin Resource Sharing (CORS) which coul... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11906 json | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allo... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11806 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 is affected by an arbitrary file read vulnerability with... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11714 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerabili... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11712 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative conso... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11708 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative conso... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11595 json | IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information from the administ... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11594 json | IBM WebSphere Application Server 9.0, and 8.5 is affected by a cross-site scripting vulnerability in the administrative conso... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11546 json | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected by a server-side request forgery vulnerabili... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11541 json | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.6 are af... | Not Provided | 2026-06-30 | 2026-07-02 |
| CVE-2026-11372 json | IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an auth... | Not Provided | 2026-06-22 | 2026-06-30 |
| CVE-2026-10852 json | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebS... | Not Provided | 2026-06-22 | 2026-06-30 |
| CVE-2026-10845 json | IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorized ac... | Not Provided | 2026-06-22 | 2026-06-23 |
Known software with vulnerabilities from IBM
| Type | Vendor | Product | Version |
|---|---|---|---|
| Hardware | Ibm | 4758 | - |
| Application | Ibm | Access Ibm Message Center | 2.103 |
| Application | Ibm | Access Manager For Microsoft .net | 4.0.6 |
| Application | Ibm | Acprunner | - |
| Application | Ibm | Actuate Encyclopedia For Ibm Maximo | 6.2.0.0 |
| Hardware | Ibm | Advanced Management Module | - |
| Operating System | Ibm | Advanced Management Module Firmware | - |
| Application | Ibm | Advanced Settings Utility | 3.62 |
| Application | Ibm | Agent Controller | 5.0.2 |
| Operating System | Ibm | Aix | - |
| Application | Ibm | Aix 5l | - |
| Application | Ibm | Aix Enetwork Firewall | - |
| Application | Ibm | Aix Parallel Systems Support Programs | - |
| Application | Ibm | Aix Snmp | - |
| Application | Ibm | Algorithmics | - |
| Application | Ibm | Algo Credit Limits | 4.5.0 |
| Application | Ibm | Algo One | 4.7.0 |
| Application | Ibm | Algo Risk Application | 1.1.1 |
| Application | Ibm | Alphaworks Tftp Server | - |
| Application | Ibm | Api Connect | 10.0.0.0 |