Ibm

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-14981 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of...Show more IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits.Show less
CVE-2026-14976 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled.
CVE-2026-14974 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.
CVE-2026-14973 1Ibm 2Aspera Aspera Desktop App Aug 13, 2026 Jul 28, 2026 N/A· v4 9.3 CRITICAL· v3 N/A· v2 IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.
CVE-2026-14959 1Ibm 1Aspera Faspex Aug 5, 2026 Jul 28, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to shell command injection.
CVE-2026-14958 1Ibm 1Aspera Faspex Aug 5, 2026 Jul 28, 2026 N/A· v4 7.2 HIGH· v3 N/A· v2 IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 could allow a remote authenticated attacker to execute arbitrary code due to unquoted shell interpolation.
CVE-2026-14528 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information.
CVE-2026-14515 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 6.1 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack.
CVE-2026-14512 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.
CVE-2026-14446 1Ibm 1Websphere Application Server Aug 5, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console.
CVE-2026-13463 1Ibm 1Cloud Pak System Aug 19, 2026 Jul 28, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 IBM Cloud Pak System 2.3.5.0 could allow a local attacker to obtain sensitive information due to the insertion of credentials into log files.
CVE-2026-3158 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 3, 2026 Jul 28, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2....Show more IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a dashboard component.Show less
CVE-2026-3157 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 3, 2026 Jul 28, 2026 N/A· v4 4.3 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2....Show more IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to an information disclosure due to sensitive information being included in the source code comments of a mailbox component.Show less
CVE-2026-1918 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 3, 2026 Jul 28, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2....Show more IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 stores potentially sensitive information in log files that could be read by a privileged user.Show less
CVE-2026-16192 1Ibm 1Websphere Application Server Aug 3, 2026 Jul 28, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled.
CVE-2026-16184 1Ibm 1Websphere Application Server Aug 3, 2026 Jul 28, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request.
CVE-2026-7769 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 3, 2026 Jul 28, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2....Show more IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.Show less
CVE-2026-7362 1Ibm 2Sterling B2b Integrator Sterling File Gateway Aug 3, 2026 Jul 28, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an authenticated user to obtain sens...Show more IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 could allow an authenticated user to obtain sensitive information that should only be available to a privileged user.Show less
CVE-2026-4932 1Ibm 17Power System E1050 (9043 Mrx) Firmware Power System E1080 (9080 Hex) FirmwarePower System E1150 (9043 Mru) Firmware+14 more Aug 26, 2026 Jul 28, 2026 N/A· v4 4.6 MEDIUM· v3 N/A· v2 IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insu...Show more IBM PowerVM Hypervisor FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 could allow an attacker with physical access to the Transparent Memory Encryption (TME) hardware to decrypt encrypted memory due to insufficient cryptographic entropy.Show less
CVE-2026-8058 1Ibm 15Power System E1050 (9043 Mrx) Firmware Power System E1150 (9043 Mru) FirmwarePower System L1022 (9786 22h) Firmware+12 more Aug 26, 2026 Jul 28, 2026 N/A· v4 4.9 MEDIUM· v3 N/A· v2 IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it.

Previous 1...212223...436 Next