Threat database

1,838 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.4	EPSS 0.2%	CVE-2026-16185WebSphere Application Server · Missing Authorization Medium6.4EPSS 0.2%2026-09-14CVE Database V5CVE-2026-16185 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet. EPSS 0.2%Vulnerability IBM #cwe-862	CVE Database V5	2026-09-14
Medium	6.5	EPSS 0.3%	CVE-2026-16187WebSphere Application Server · Missing Authorization Medium6.5EPSS 0.3%2026-09-14CVE Database V5CVE-2026-16187 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request. EPSS 0.3%Vulnerability IBM #cwe-862	CVE Database V5	2026-09-14
Medium	5.3	EPSS 0.3%	CVE-2026-16188WebSphere Application Server · Improper Output Neutralization for Logs Medium5.3EPSS 0.3%2026-09-14CVE Database V5CVE-2026-16188 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log. EPSS 0.3%Vulnerability IBM #cwe-117	CVE Database V5	2026-09-14
Low	3.1	EPSS 0.2%	CVE-2026-16190WebSphere Application Server · Missing Authorization Low3.1EPSS 0.2%2026-09-14CVE Database V5CVE-2026-16190 IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability. EPSS 0.2%Vulnerability IBM #cwe-862	CVE Database V5	2026-09-14
Medium	4.8	EPSS 0.2%	CVE-2026-16189WebSphere Application Server · Improper Output Neutralization for Logs Medium4.8EPSS 0.2%2026-09-14CVE Database V5CVE-2026-16189 IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log. EPSS 0.2%Vulnerability IBM #cwe-117	CVE Database V5	2026-09-14
High	8.1	EPSS 0.5%	CVE-2026-16335DataStage on Cloud Pak for Data · Path Traversal High8.1EPSS 0.5%2026-09-14CVE Database V5CVE-2026-16335 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to read, write, or delete arbitrary files due to a path traversal vulnerability. EPSS 0.5%Vulnerability IBM #cwe-22 #ghsa-62pm-w4v4-5rv8	CVE Database V5	2026-09-14
Critical	9.9	EPSS 0.4%	CVE-2026-16338DataStage on Cloud Pak for Data · External Control of File Name or Path Critical9.9EPSS 0.4%2026-09-14CVE Database V5CVE-2026-16338 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths. EPSS 0.4%Vulnerability IBM #cwe-73 #ghsa-9p83-pgmg-hprg	CVE Database V5	2026-09-14
Medium	5.9	EPSS 0.3%	CVE-2026-16435WebSphere Application Server · Trusting HTTP Permission Methods on the Server Side Medium5.9EPSS 0.3%2026-09-14CVE Database V5CVE-2026-16435 IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features. EPSS 0.3%Vulnerability IBM #cwe-650	CVE Database V5	2026-09-14
High	7.7	EPSS 0.3%	CVE-2026-16432DataStage on Cloud Pak for Data · Improper Restriction of XML External Entity Reference High7.7EPSS 0.3%2026-09-14CVE Database V5CVE-2026-16432 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection. EPSS 0.3%Vulnerability IBM #cwe-611 #ghsa-39mg-9c9r-37cc	CVE Database V5	2026-09-14
High	8.8	EPSS 0.6%	CVE-2026-16428DataStage on Cloud Pak for Data · Code Injection High8.8EPSS 0.6%2026-09-14CVE Database V5CVE-2026-16428 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine. EPSS 0.6%Vulnerability IBM #cwe-94 #ghsa-2389-phrx-hh6g	CVE Database V5	2026-09-14
High	8.8	EPSS 0.9%	CVE-2026-16466DataStage on Cloud Pak for Data · OS Command Injection High8.8EPSS 0.9%2026-09-14CVE Database V5CVE-2026-16466 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary commands due to os command injection. EPSS 0.9%Vulnerability IBM #cwe-78	CVE Database V5	2026-09-14
High	8.8	EPSS 0.4%	CVE-2026-16673DataStage on Cloud Pak for Data · Vulnerability High8.8EPSS 0.4%2026-09-14CVE Database V5CVE-2026-16673 IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special characters in the PxPeek name property. EPSS 0.4%Vulnerability IBM	CVE Database V5	2026-09-14
Medium	6.5	EPSS 0.3%	CVE-2026-16702Db2 · NULL Pointer Dereference Medium6.5EPSS 0.3%2026-09-14CVE Database V5CVE-2026-16702 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to a null pointer dereference. EPSS 0.3%Vulnerability IBM #cwe-476 #ghsa-4hwq-345h-4p3j	CVE Database V5	2026-09-14
Medium	5.4	EPSS 0.1%	CVE-2026-17047Db2 Mirror for i · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2026-09-14CVE Database V5CVE-2026-17047 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation. EPSS 0.1%Vulnerability IBM #cwe-352 #ghsa-g477-2735-hpx2	CVE Database V5	2026-09-14
High	7.8	EPSS 0.1%	CVE-2026-17133App Connect Enterprise · OS Command Injection High7.8EPSS 0.1%2026-09-14CVE Database V5CVE-2026-17133 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. EPSS 0.1%Vulnerability IBM #cwe-78	CVE Database V5	2026-09-14
High	7.8	EPSS 0.1%	CVE-2026-17156App Connect Enterprise · Deserialization of Untrusted Data High7.8EPSS 0.1%2026-09-14CVE Database V5CVE-2026-17156 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization. EPSS 0.1%Vulnerability IBM #cwe-502	CVE Database V5	2026-09-14
Medium	6.5	EPSS 0.3%	CVE-2026-17463Db2 · Uncontrolled Resource Consumption Medium6.5EPSS 0.3%2026-09-14CVE Database V5CVE-2026-17463 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption. EPSS 0.3%Vulnerability IBM #cwe-400 #ghsa-g9xv-h3jc-5g3h	CVE Database V5	2026-09-14
High	7.8	EPSS 0.1%	CVE-2026-17416App Connect Enterprise · Deserialization of Untrusted Data High7.8EPSS 0.1%2026-09-14CVE Database V5CVE-2026-17416 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.0, and 12.0.1.0 through 12.0.12.27 could allow a local attacker to execute arbitrary code due to insecure deserialization. EPSS 0.1%Vulnerability IBM #cwe-502	CVE Database V5	2026-09-14
High	8.2	EPSS 0.2%	CVE-2026-17467Cloud Pak for Data System (Yosemite 1.0) · Use of a Broken or Risky Cryptographic Algorithm High8.2EPSS 0.2%2026-09-14CVE Database V5CVE-2026-17467 IBM Cloud Pak for Data System (Yosemite 1.0) 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols. EPSS 0.2%Vulnerability IBM #cwe-327	CVE Database V5	2026-09-14
Medium	5.4	EPSS 0.3%	CVE-2026-17628Langflow OSS · Improper Authentication Medium5.4EPSS 0.3%2026-09-14CVE Database V5CVE-2026-17628 IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to change the password of an account due to improper authentication. EPSS 0.3%Vulnerability IBM #cwe-287	CVE Database V5	2026-09-14

Showing 481–500 of 1,838 results