VendorsIBMiall versions
Vulnerabilities

IBM i

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

278CVEs
CVE-2026-18150
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
Published 2026-08-12 · Analyzed
5.3EPSS 0.003
CVE-2026-17487
IBM i is Information Disclosure
Published 2026-10-12 · Analyzed
5.3EPSS 0.002
CVE-2026-17275
IBM i is Affected by an Improper Validation Vulnerability
Published 2026-10-16 · Analyzed
5.3EPSS 0.002
CVE-2026-18086
IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
Published 2026-08-13 · Analyzed
5.3EPSS 0.001
CVE-2026-107674
IBM i is Affected by a Denial of Service in Digital Certificate Manager
Published 2026-10-16 · Analyzed
5.1EPSS 0.001
CVE-2026-16693
IBM i is Affected By Cryptographic Algorithm Weakness in DCM []
Published 2026-09-04 · Analyzed
4.9EPSS 0.002
CVE-2026-18073
IBM i is Affected By Multiple Vulnerabilities in Debug Server
Published 2026-09-04 · Analyzed
4.4EPSS 0.002
CVE-2026-17438
IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []
Published 2026-08-13 · Analyzed
4.4EPSS 0.001
CVE-2026-18343
IBM i is Affected By An Improper Privilege Management Vulnerability
Published 2026-10-12 · Analyzed
4.4EPSS 0.001
CVE-2024-51464
IBM i authentication bypass
Published 2024-12-21 · Modified
4.31 PoCEPSS 0.014
CVE-2019-4377
IBM Sterling B2B Integrator 6.0.0.0 and 6.0.0.1 reveals sensitive information from a stack trace that could be used in further attacks against the system. IBM X-Force ID: 162803.
Published 2019-06-25 · Modified
4.3EPSS 0.013
CVE-2022-43857
IBM Navigator for i information disclosure
Published 2022-12-22 · Modified
4.3EPSS 0.011
CVE-2022-43858
IBM Navigator for i information disclosure
Published 2022-12-22 · Modified
4.3EPSS 0.011
CVE-2020-4299
IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 could expose sensitive information to a user through a specially crafted HTTP request. IBM X-Force ID: 176606.
Published 2020-05-14 · Modified
4.3EPSS 0.010
CVE-2022-43860
IBM Navigator for i SQL injection
Published 2022-12-22 · Modified
4.3EPSS 0.005
CVE-2026-17088
IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
Published 2026-08-13 · Analyzed
4.3EPSS 0.005
CVE-2026-18106
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
Published 2026-08-12 · Analyzed
4.3EPSS 0.005
CVE-2026-17109
IBM i is Affected By Multiple Vulnerabilities in SQL
Published 2026-08-12 · Analyzed
4.3EPSS 0.004
CVE-2026-18068
IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
Published 2026-08-13 · Analyzed
4.3EPSS 0.004
CVE-2026-16871
IBM i is Affected By Multiple Vulnerabilities in NetServer
Published 2026-08-13 · Undergoing Analysis
4.3EPSS 0.004
CVE-2026-17222
IBM i is Affected By Multiple Vulnerabilities in SQL
Published 2026-08-12 · Analyzed
4.3EPSS 0.003
CVE-2026-18148
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
Published 2026-08-12 · Analyzed
4.3EPSS 0.003
CVE-2026-18144
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
Published 2026-08-12 · Analyzed
4.3EPSS 0.003
CVE-2026-18246
IBM i is Affected By security restrictions bypass in Navigator for i
Published 2026-08-12 · Analyzed
4.3EPSS 0.003
CVE-2026-16941
IBM i is Affected By An Incorrect Authorization Vulnerability []
Published 2026-09-04 · Analyzed
4.3EPSS 0.003
CVE-2026-18102
IBM i Buffer Overflow
Published 2026-08-19 · Analyzed
4.3EPSS 0.003
CVE-2026-17074
IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
Published 2026-08-13 · Analyzed
4.3EPSS 0.003
CVE-2024-55897
IBM PowerHA SystemMirror for i information disclosure
Published 2025-01-03 · Analyzed
4.3EPSS 0.002
CVE-2025-27907
IBM WebSphere Application Server server-side request forgery
Published 2025-04-22 · Analyzed
4.1EPSS 0.004
CVE-2022-42436
IBM MQ information disclosure
Published 2023-02-08 · Modified
4.0EPSS 0.002
CVE-2026-17043
IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
Published 2026-08-13 · Analyzed
3.8EPSS 0.005
CVE-2023-33855
IBM Common Cryptographic Architecture information disclosure
Published 2024-03-26 · Analyzed
3.7EPSS 0.005
CVE-2024-41760
IBM Common Cryptographic Architecture information disclosure
Published 2025-03-11 · Analyzed
3.7EPSS 0.003
CVE-2020-4629
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.
Published 2020-09-30 · Modified
3.3EPSS 0.003
CVE-2020-4345
IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318.
Published 2020-05-17 · Modified
3.3EPSS 0.003
CVE-2024-31870
IBM i information disclosure
Published 2024-06-15 · Modified
3.3EPSS 0.002
CVE-2024-35122
IBM i denial of service
Published 2025-01-24 · Modified
2.8EPSS 0.002
CVE-2026-17071
IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
Published 2026-08-13 · Analyzed
2.7EPSS 0.004
← Prev7 / 7