[ Vendor · 330 CVEs ]
IBM
CVEs affecting IBM published in the last 30 days, plus any IBM CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-9825 | 20 Oct 2026 | CVSS 3.7 | IBM CyberFraudIBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections… | |
| CVE-2026-92559 | 20 Oct 2026 | CVSS 9.8 | IBM App Connect EnterpriseIBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted… | |
| CVE-2026-93441 | 20 Oct 2026 | CVSS 8.6 | IBM QRadar Security Information and Event ManagementIBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-93442 | 20 Oct 2026 | CVSS 8.2 | IBM QRadarIBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of… | |
| CVE-2026-93744 | 20 Oct 2026 | CVSS 6.5 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending… | |
| CVE-2026-93888 | 20 Oct 2026 | CVSS 7.8 | IBM Sterling Connect Direct for UnixIBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to… | |
| CVE-2026-94402 | 20 Oct 2026 | CVSS 6.1 | IBM @carbon/chartsIBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a… | |
| CVE-2026-87800 | 20 Oct 2026 | CVSS 6.8 | IBM Cyber FraudIBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a… | |
| CVE-2026-82891 | 20 Oct 2026 | CVSS 8.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic… | |
| CVE-2026-81212 | 20 Oct 2026 | CVSS 10.0 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key… | |
| CVE-2026-76587 | 20 Oct 2026 | CVSS 8.8 | IBM Planning AnalyticsIBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow… | |
| CVE-2026-8355 | 20 Oct 2026 | CVSS 5.4 | IBM ContextForge MCP GatewayIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway… | |
| CVE-2026-109126 | 20 Oct 2026 | CVSS 8.8 | IBM Verify Identity AccessIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated… | |
| CVE-2026-107366 | 20 Oct 2026 | CVSS 8.3 | IBM Langflow OSSIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete… | |
| CVE-2026-107400 | 20 Oct 2026 | CVSS 8.8 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper… | |
| CVE-2026-105453 | 20 Oct 2026 | CVSS 8.4 | IBM Sterling Connect Direct for UnixIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due… | |
| CVE-2026-19178 | 19 Oct 2026 | CVSS 6.8 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to… | |
| CVE-2025-36061 | 19 Oct 2026 | CVSS 6.5 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to… | |
| CVE-2025-36069 | 19 Oct 2026 | CVSS 5.5 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate… | |
| CVE-2025-36252 | 19 Oct 2026 | CVSS 6.3 | IBM Storage TS4500 LibraryIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an… | |
| CVE-2026-6719 | 19 Oct 2026 | CVSS 7.5 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| CVE-2026-3161 | 19 Oct 2026 | CVSS 5.9 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive… | |
| CVE-2026-3295 | 19 Oct 2026 | CVSS 7.4 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or… | |
| CVE-2026-3303 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain… | |
| CVE-2026-3628 | 19 Oct 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. | |
| CVE-2026-4405 | 19 Oct 2026 | CVSS 4.0 | IBM ConcertIBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. | |
| CVE-2026-4413 | 19 Oct 2026 | CVSS 6.1 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary… | |
| CVE-2026-4418 | 19 Oct 2026 | CVSS 5.4 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which… | |
| CVE-2026-1501 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. | |
| CVE-2026-1510 | 19 Oct 2026 | CVSS 4.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. | |
| CVE-2023-38375 | 19 Oct 2026 | CVSS 6.1 | IBM Cloud Pak SystemIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code… | |
| CVE-2026-6930 | 19 Oct 2026 | CVSS 3.7 | IBM ConcertIBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. | |
| CVE-2026-14511 | 19 Oct 2026 | CVSS 6.5 | IBM MQIBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes… | |
| CVE-2026-15661 | 19 Oct 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements… | |
| CVE-2026-12669 | 19 Oct 2026 | CVSS 3.1 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not… | |
| CVE-2026-12670 | 19 Oct 2026 | CVSS 5.3 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory… | |
| CVE-2026-12727 | 19 Oct 2026 | CVSS 4.3 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially… | |
| CVE-2026-12350 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes… | |
| CVE-2026-12660 | 19 Oct 2026 | CVSS 2.7 | IBM MQ OperatorIBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. | |
| CVE-2026-12665 | 19 Oct 2026 | CVSS 8.1 | IBM MQ OperatorIBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed… | |
| CVE-2026-12148 | 19 Oct 2026 | CVSS 7.5 | IBM MQ OperatorIBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java… | |
| CVE-2026-12155 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL… | |
| CVE-2026-12343 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued… | |
| CVE-2026-11828 | 19 Oct 2026 | CVSS 5.9 | IBM MQ OperatorIBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in… | |
| CVE-2026-11829 | 19 Oct 2026 | CVSS 6.5 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests. | |
| CVE-2026-11831 | 19 Oct 2026 | CVSS 5.4 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due… | |
| CVE-2026-10743 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN… | |
| CVE-2026-10572 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… | |
| CVE-2026-10574 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… | |
| CVE-2026-17068 | 16 Oct 2026 | CVSS 5.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag. | |
| CVE-2026-17073 | 16 Oct 2026 | CVSS 5.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution. | |
| CVE-2026-17275 | 16 Oct 2026 | CVSS 3.7 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper… | |
| CVE-2026-17488 | 16 Oct 2026 | CVSS 4.3 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. | |
| CVE-2026-17491 | 16 Oct 2026 | CVSS 5.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the… | |
| CVE-2026-107674 | 16 Oct 2026 | CVSS 5.1 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting… | |
| CVE-2026-102917 | 16 Oct 2026 | CVSS 7.8 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to… | |
| CVE-2026-109838 | 16 Oct 2026 | CVSS 5.1 | IBM Db2 Genius HubIBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. | |
| CVE-2026-109839 | 16 Oct 2026 | CVSS 3.1 | IBM Db2 Genius HubIBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the… | |
| CVE-2026-95695 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect… | |
| CVE-2026-95696 | 13 Oct 2026 | CVSS 7.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught… | |
| CVE-2026-93895 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls… | |
| CVE-2026-93905 | 13 Oct 2026 | CVSS 8.2 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status… | |
| CVE-2026-93909 | 13 Oct 2026 | CVSS 9.1 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0… | |
| CVE-2026-77816 | 13 Oct 2026 | CVSS 6.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could… | |
| CVE-2026-79715 | 13 Oct 2026 | CVSS 5.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker… | |
| CVE-2026-14532 | 13 Oct 2026 | CVSS 4.3 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an… | |
| CVE-2026-14909 | 13 Oct 2026 | CVSS 6.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an… | |
| CVE-2026-11713 | 13 Oct 2026 | CVSS 5.4 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0… | |
| CVE-2026-105443 | 13 Oct 2026 | CVSS 8.2 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install. | |
| CVE-2026-105442 | 13 Oct 2026 | CVSS 7.5 | IBM WebSphere Application ServerIBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote… | |
| CVE-2026-101294 | 13 Oct 2026 | CVSS 8.7 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker… | |
| CVE-2026-53711 | 13 Oct 2026 | CVSS 5.1 | IBM mcp-context-forgeMCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt… | |
| CVE-2026-53709 | 13 Oct 2026 | CVSS 9.8 | IBM mcp-context-forgeMCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY… | |
| CVE-2026-93907 | 13 Oct 2026 | CVSS 8.1 | IBM WebSphere Application ServerIBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound… | |
| CVE-2026-95680 | 13 Oct 2026 | CVSS 8.0 | IBM WebSphere Application ServerIBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation… | |
| CVE-2026-103499 | 13 Oct 2026 | CVSS 7.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote… | |
| CVE-2026-96119 | 13 Oct 2026 | CVSS 9.9 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due… | Fix |
| CVE-2026-17487 | 13 Oct 2026 | CVSS 5.3 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on… | Fix |
| CVE-2026-18318 | 13 Oct 2026 | CVSS 5.3 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication. | Fix |
| CVE-2026-18343 | 13 Oct 2026 | CVSS 4.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization. | Fix |
| CVE-2026-81858 | 13 Oct 2026 | CVSS 8.1 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds… | Fix |
| CVE-2026-93886 | 13 Oct 2026 | CVSS 5.4 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied… | Fix |
| CVE-2026-17484 | 13 Oct 2026 | CVSS 5.5 | IBM iIBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control. | Fix |
| CVE-2026-84418 | 12 Oct 2026 | CVSS 7.4 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and… | Fix |
| CVE-2026-85457 | 12 Oct 2026 | CVSS 8.1 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. | |
| CVE-2026-92832 | 12 Oct 2026 | CVSS 5.1 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of… | |
| CVE-2026-93891 | 12 Oct 2026 | CVSS 7.6 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML… | |
| CVE-2026-93892 | 12 Oct 2026 | CVSS 8.1 | IBM TRIRIGA Application PlatformIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of… | |
| CVE-2026-82103 | 12 Oct 2026 | CVSS 6.5 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of… | Fix |
| CVE-2026-82108 | 12 Oct 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of… | Fix |
| CVE-2026-82110 | 12 Oct 2026 | CVSS 9.9 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of… | Fix |
| CVE-2026-82096 | 12 Oct 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization… | Fix |
| CVE-2026-82101 | 12 Oct 2026 | CVSS 9.6 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal… | Fix |
| CVE-2026-75782 | 12 Oct 2026 | CVSS 7.8 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment… | |
| CVE-2026-75061 | 12 Oct 2026 | CVSS 7.5 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted… | Fix |
| CVE-2026-75063 | 12 Oct 2026 | CVSS 5.4 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding. | Fix |
| CVE-2026-75076 | 12 Oct 2026 | CVSS 4.3 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript… | |
| CVE-2026-75095 | 12 Oct 2026 | CVSS 7.5 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. | |
| CVE-2026-75621 | 12 Oct 2026 | CVSS 6.2 | IBM Aspera Enterprise WebAppsIBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned… | |
| CVE-2026-19622 | 12 Oct 2026 | CVSS 9.8 | IBM Planning AnalyticsIBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of… | Fix |
Page 1 of 4