IBM: known exploited vulnerabilities
Entries8No. 32
Ransomware-linked2
Products6
Latest2026-08-04
Added per year
By product
3
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-9198 | IBM Langflow | 2026-08-04 | 28.6% | Unknown |
| CVE-2022-47986 | IBM Aspera Faspex | 2023-02-21 | 99.9% | Known |
| CVE-2013-3993 | IBM InfoSphere BigInsights | 2022-05-25 | 4.7% | Known |
| CVE-2015-7450 | IBM WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | 97.7% | Unknown |
| CVE-2020-4430 | IBM Data Risk Manager | 2021-11-03 | 68.5% | Unknown |
| CVE-2020-4428 | IBM Data Risk Manager | 2021-11-03 | 61.6% | Unknown |
| CVE-2020-4427 | IBM Data Risk Manager | 2021-11-03 | 70.0% | Unknown |
| CVE-2019-4716 | IBM Planning Analytics | 2021-11-03 | 86.4% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 8 IBM vulnerabilities (No. 32 of 288 vendors).