Current status
Authorized · High impact · since 2026-07-07
Service modelIaaS, PaaS
MarketplaceRev5 · source: marketplace
Security posture
8 critical
68 high
8 on KEV
· 84 correlated CVEs
CMMC DOMAINS ADDRESSED
STATUS TIMELINE · SCD2
| STATUS | FROM | TO |
|---|---|---|
| Authorized | 2026-07-07 | current |
AUTHORIZATIONS
| AGENCY | TYPE | DATE |
|---|---|---|
| JAB Authorization | JAB | 2019-11-14 |
EXPOSED CVEs · CORRELATED TO THIS PRODUCT
all exposures
| SEVERITY | CVE | TITLE |
|---|---|---|
| HIGH | CVE-2026-19622 | CVE-2026-19622: IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass auth |
| MEDIUM | CVE-2026-14508 | CVE-2026-14508: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0. |
| HIGH | CVE-2026-14888 | CVE-2026-14888: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0. |
| MEDIUM | CVE-2026-14988 | CVE-2026-14988: IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0. |
| HIGH | CVE-2026-81932 | CVE-2026-81932: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection |
| HIGH | CVE-2026-82334 | CVE-2026-82334: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out- |
| HIGH | CVE-2026-82335 | CVE-2026-82335: IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buff |
| HIGH | CVE-2026-82344 | CVE-2026-82344: IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer ove |
| HIGH | CVE-2026-82895 | CVE-2026-82895: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker |
| HIGH | CVE-2026-82900 | CVE-2026-82900: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to d |
| HIGH | CVE-2026-84035 | CVE-2026-84035: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker |
| HIGH | CVE-2026-84057 | CVE-2026-84057: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e |
| HIGH | CVE-2026-84058 | CVE-2026-84058: IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer over |
| HIGH | CVE-2026-84198 | CVE-2026-84198: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker |
| HIGH | CVE-2026-84209 | CVE-2026-84209: IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to e |
| HIGH | CVE-2026-84246 | CVE-2026-84246: IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker |
| HIGH | CVE-2026-17618 | CVE-2026-17618: IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot |
| HIGH | CVE-2026-10027 | CVE-2026-10027: IBM MQ could allow a remote attacker to cause a denial of service or execute arb |
| MEDIUM | CVE-2026-17057 | CVE-2026-17057: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of |
| MEDIUM | CVE-2026-17207 | CVE-2026-17207: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of |
| HIGH | CVE-2026-18221 | CVE-2026-18221: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized |
| HIGH | CVE-2026-77822 | CVE-2026-77822: IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obta |
| HIGH | CVE-2026-17000 | CVE-2026-17000: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-17003 | CVE-2026-17003: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c |
| HIGH | CVE-2026-17006 | CVE-2026-17006: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-17024 | CVE-2026-17024: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-17060 | CVE-2026-17060: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to o |
| HIGH | CVE-2026-17138 | CVE-2026-17138: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-17423 | CVE-2026-17423: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to o |
| HIGH | CVE-2026-17436 | CVE-2026-17436: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-18670 | CVE-2026-18670: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to c |
| HIGH | CVE-2026-18716 | CVE-2026-18716: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated |
| HIGH | CVE-2026-18832 | CVE-2026-18832: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-19437 | CVE-2026-19437: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| CRITICAL | CVE-2026-16919 | CVE-2026-16919: IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-16815 | CVE-2026-16815: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of |
| HIGH | CVE-2026-16867 | CVE-2026-16867: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server reso |
| HIGH | CVE-2026-16961 | CVE-2026-16961: IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. A remote attacker could s |
| HIGH | CVE-2026-17101 | CVE-2026-17101: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary |
| HIGH | CVE-2026-17197 | CVE-2026-17197: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security re |
| HIGH | CVE-2026-17206 | CVE-2026-17206: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary |
| HIGH | CVE-2026-17481 | CVE-2026-17481: IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to e |
| HIGH | CVE-2026-18193 | CVE-2026-18193: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security re |
| HIGH | CVE-2026-18249 | CVE-2026-18249: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain |
| HIGH | CVE-2026-10534 | CVE-2026-10534: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer |
| HIGH | CVE-2026-10543 | CVE-2026-10543: IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privil |
| HIGH | CVE-2026-13433 | CVE-2026-13433: IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to do |
| CRITICAL | CVE-2026-16860 | CVE-2026-16860: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to exec |
| HIGH | CVE-2026-17111 | CVE-2026-17111: IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. A remote attacker co |
| CRITICAL | CVE-2026-17276 | CVE-2026-17276: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to esca |
| MEDIUM | CVE-2026-17616 | CVE-2026-17616: IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access |
| HIGH | CVE-2026-18847 | CVE-2026-18847: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to ha |
| HIGH | CVE-2026-10025 | CVE-2026-10025: IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 00 |
| HIGH | CVE-2026-17617 | CVE-2026-17617: IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side |
| HIGH | CVE-2026-8400 | CVE-2026-8400: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Serv |
| HIGH | CVE-2026-9198 | IBM Langflow Code Injection Vulnerability |
| HIGH | CVE-2026-14522 | CVE-2026-14522: IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0. |
| CRITICAL | CVE-2026-14529 | CVE-2026-14529: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv |
| HIGH | CVE-2026-14974 | CVE-2026-14974: IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote a |
| HIGH | CVE-2026-14976 | CVE-2026-14976: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected |
| HIGH | CVE-2026-16184 | CVE-2026-16184: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to b |
| HIGH | CVE-2026-13473 | CVE-2026-13473: IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 throu |
| MEDIUM | CVE-2026-14501 | CVE-2026-14501: IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacke |
| HIGH | CVE-2026-3144 | CVE-2026-3144: IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could a |
| CRITICAL | CVE-2026-9074 | CVE-2026-9074: IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains |
| HIGH | CVE-2026-11541 | CVE-2026-11541: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv |
| HIGH | CVE-2026-11546 | CVE-2026-11546: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected |
| HIGH | CVE-2026-11714 | CVE-2026-11714: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is affected |
| HIGH | CVE-2026-13449 | CVE-2026-13449: IBM Business Automation Manager Open Editions 9.0.0 through 9.4.2 is vulnerable |
| HIGH | CVE-2026-13772 | CVE-2026-13772: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 's Object Query Language eng |
| MEDIUM | CVE-2026-13773 | CVE-2026-13773: IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.1.6 Approximately 50 generated C |
| HIGH | CVE-2026-9072 | CVE-2026-9072: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - |
| CRITICAL | CVE-2026-7876 | CVE-2026-7876: IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication b |
| MEDIUM | CVE-2025-36220 | CVE-2025-36220: IBM Cloud Pak for Data System - Cyclops 11.3.0.2 through Interim Fix 002 IBM Cl |
| HIGH | CVE-2026-8855 | CVE-2026-8855: IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial o |
| HIGH | CVE-2026-8856 | CVE-2026-8856: IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service in configuration |
| HIGH | CVE-2025-3356 | CVE-2025-3356: IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remo |
| CRITICAL | CVE-2022-47986 | IBM Aspera Faspex Code Execution Vulnerability |
| CRITICAL | CVE-2013-3993 | IBM InfoSphere BigInsights Invalid Input Vulnerability |
| HIGH | CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. |
| HIGH | CVE-2019-4716 | IBM Planning Analytics Remote Code Execution Vulnerability |
| HIGH | CVE-2020-4427 | IBM Data Risk Manager Security Bypass Vulnerability |
| HIGH | CVE-2020-4428 | IBM Data Risk Manager Remote Code Execution Vulnerability |
| HIGH | CVE-2020-4430 | IBM Data Risk Manager Directory Traversal Vulnerability |