Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install.EPSS 0.2%Oct 13, 2026
- Unknownlinux-aws-5.4, linux-aws-fips, linux-azure-fips, linux-ibm, linux-ibm-5.4 vulnerabilitiesOct 13, 2026
- Unknownlinux, linux-aws, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-lowlatency, linux-oracle, linux-realtime vulnerabilitiesOct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception.EPSS 0.3%Oct 13, 2026
- High7.4IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.EPSS 0.3%Oct 13, 2026
- Critical9.1IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled.EPSS 0.4%Oct 13, 2026
- High8.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances.EPSS 0.3%Oct 13, 2026
- Critical9.1IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.EPSS 0.4%Oct 13, 2026
- Medium5.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system.EPSS 0.1%Oct 13, 2026
- Medium6.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks.EPSS 0.2%Oct 13, 2026
- Medium4.3IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception.EPSS 0.2%Oct 13, 2026
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.EPSS 0.2%Oct 13, 2026
- Medium5.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input.EPSS 0.2%Oct 13, 2026
- High8.1IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server.EPSS 0.5%Oct 13, 2026
- Medium4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.EPSS 0.1%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.EPSS 0.3%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.EPSS 0.2%Oct 13, 2026
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.EPSS 0.1%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…EPSS 0.5%Oct 13, 2026
- High8.1IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow.EPSS 0.4%Oct 12, 2026
- High7.4IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM b…EPSS 0.1%Oct 12, 2026
- Critical9.9IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.EPSS 0.5%Oct 12, 2026
- High8.8IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements us…EPSS 0.5%Oct 12, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…EPSS 0.3%Oct 12, 2026
- Critical9.6IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 12, 2026
111 records · page 1 of 5
PreviousNext