This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vendor Profiles

IBM

Number 5 by total vulnerabilities in the catalog.

Computed from the whole catalog when the site is built.

Compare with another vendor

Total vulnerabilities

6,553

Critical

315

High

1,437

Known Exploited

9

Exploit available

15

Network, no login needed

32.3%

Of 5,787 scored records

New vulnerabilities per year, by severity
  • Critical
  • High
  • Medium
  • Low
  • None or not scored
Show as table
PeriodTotalCriticalHighMediumLowNone or not scored
2026 (incomplete)1,848236781764670
202560621111434400
20245041290377250
2023414686297250
2022387330318360
2021606473486430
202055816109378487
20194711186352220
201851657029626119
20176400010639
2016110000
2015000000
2014100100
2013000000
2012000000
2011000000
2010000000
2009000000
2008000000
2007000000
2006000000
2005000000
2004000000
2003000000
2002000000
2001000000
2000000000
1999101000

Top products

ProductTotalCritical/High
API Connect287161
i21396
AIX204134
WebSphere Application Server18257
Langflow OSS177128
InfoSphere Information Server15122
Sterling B2B Integrator1387
MQ11643
QRadar SIEM11315
Security Guardium10618

Top bug types

Bug typeTotalCritical/High
Cross-Site Scripting31127
Memory Corruption240159
Path Traversal15576
Information Disclosure14513
Server-Side Request Forgery13263
Command Injection124105
Authentication Issues11172
Improper Input Validation9213
Code Injection8273
Generation of Error Message Containing Sensitive Information751

Known to be attacked

CVETitlePublishedSeverityEPSS
CVE-2026-123218IBM Aspera Faspex Authorization BypassCritical0.7%
CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationCritical28.7%
CVE-2022-47986IBM Aspera Faspex code executionCritical100.0%
CVE-2020-4430IBM Data Risk Manager: Path TraversalMedium68.5%
CVE-2020-4428IBM Data Risk Manager: Command InjectionCritical61.7%
CVE-2020-4427IBM Data Risk Manager: Authentication IssuesCritical70.0%
CVE-2019-4716IBM Planning Analytics: Code InjectionCritical86.4%
CVE-2015-7450IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.Critical97.8%
CVE-2013-3993IBM InfoSphere BigInsights Invalid Input VulnerabilityMedium4.8%

Newest vulnerabilities

CVETitlePublishedSeverityEPSS
CVE-2026-97677Langflow OSS is affected by multiple vulnerabilitiesHigh0.4%
CVE-2026-9764IBM Bob is vulnerable to Remote Code Execution due to improper control of workspace-defined MCP server executionHigh0.3%
CVE-2026-96146Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementHigh0.3%
CVE-2026-95867Multiple vulnerabilities previously addressed in IBM SevOne Network Performance ManagementMedium0.2%
CVE-2026-93879Hibernate Validator is affected by an expression language injection vulnerabilityHigh0.3%
CVE-2026-93005Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026Medium0.2%
CVE-2026-8860IBM Verify Directory is affected by multiple vulnerabilitiesMedium0.3%
CVE-2026-8642IBM Verify Directory is affected by multiple vulnerabilitiesMedium0.2%
CVE-2026-8640IBM Verify Directory is affected by multiple vulnerabilitiesLow0.1%
CVE-2026-8639IBM Verify Directory is affected by multiple vulnerabilitiesHigh0.3%