Exploited vulnerabilities
IBM
8 IBM vulnerabilities in the CISA KEV catalogue: those for which the US cybersecurity agency has evidence of exploitation in real attacks.
In the catalogue8
Last 12 months1
In ransomware campaigns2
Last addition4 August 2026
The vulnerabilities8
- 4 August 2026CVE-2026-9198LangflowIBM Langflow Code Injection Vulnerability
- 21 February 2023CVE-2022-47986Aspera FaspexIBM Aspera Faspex Code Execution VulnerabilityRansomware
- 25 May 2022CVE-2013-3993InfoSphere BigInsightsIBM InfoSphere BigInsights Invalid Input VulnerabilityRansomware
- 10 January 2022CVE-2015-7450WebSphere Application Server and Server Hypervisor EditionIBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
- 3 November 2021CVE-2020-4430Data Risk ManagerIBM Data Risk Manager Directory Traversal Vulnerability
- 3 November 2021CVE-2020-4428Data Risk ManagerIBM Data Risk Manager Remote Code Execution Vulnerability
- 3 November 2021CVE-2020-4427Data Risk ManagerIBM Data Risk Manager Security Bypass Vulnerability
- 3 November 2021CVE-2019-4716Planning AnalyticsIBM Planning Analytics Remote Code Execution Vulnerability
Data: CISA Known Exploited Vulnerabilities (KEV) catalogue, last addition on 4 November 2026.
The catalogue lists only vulnerabilities with evidence of exploitation, not all of the vendor's vulnerabilities.
Alerts only on the products you use
With My Defence you receive alerts and briefings only on the products you use, IBM included.