Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.6IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special element…EPSS 0.4%Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding.Oct 12, 2026
- High7.5IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system.Oct 12, 2026
- High8.2IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths.Oct 12, 2026
- Critical9.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests.EPSS 0.4%Oct 12, 2026
- High8.8IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication.EPSS 0.3%Oct 12, 2026
- Medium5.4IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting.Oct 12, 2026
- High7.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional…Oct 12, 2026
- Medium5.1Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform.Oct 12, 2026
- High7.2IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.EPSS 0.3%Oct 12, 2026
- Medium5.5IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs.Oct 8, 2026
- High7.5IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials.Oct 8, 2026
- High8.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function.Oct 8, 2026
- Medium6.5IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.EPSS 0.4%Oct 8, 2026
- Medium5.9IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes…EPSS 0.3%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used i…EPSS 0.3%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.EPSS 0.4%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder.EPSS 0.4%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.EPSS 0.4%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.EPSS 0.4%Oct 8, 2026
- High8.1IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.EPSS 0.2%Oct 8, 2026
- Critical9.1IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.EPSS 0.4%Oct 8, 2026