{"meta":{"title":"KEV entries: IBM","description":"All KEV entries for vendor IBM.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":8,"vendor":"IBM","entries":8,"shareOfCatalogPercent":0.5,"ransomwareKnown":2,"firstDateAdded":"2021-11-03","latestDateAdded":"2026-08-04","rank":33},"data":[{"cveID":"CVE-2026-9198","vendorProject":"IBM","product":"Langflow","vulnerabilityName":"IBM Langflow Code Injection Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.ibm.com/support/pages/node/7278927 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9198","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-9198/"},{"cveID":"CVE-2022-47986","vendorProject":"IBM","product":"Aspera Faspex","vulnerabilityName":"IBM Aspera Faspex Code Execution Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","knownRansomwareCampaignUse":"Known","cwes":["CWE-502"],"shortDescription":"IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw.","requiredAction":"Apply updates per vendor instructions.","notes":"https://exchange.xforce.ibmcloud.com/vulnerabilities/243512?_ga=2.189195179.1800390251.1676559338-700333034.1676325890;  https://nvd.nist.gov/vuln/detail/CVE-2022-47986","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2022-47986"},{"cveID":"CVE-2013-3993","vendorProject":"IBM","product":"InfoSphere BigInsights","vulnerabilityName":"IBM InfoSphere BigInsights Invalid Input Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","knownRansomwareCampaignUse":"Known","cwes":["CWE-264"],"shortDescription":"Certain APIs within BigInsights can take invalid input that might allow attackers unauthorized access to read, write, modify, or delete data.","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3993","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2013-3993"},{"cveID":"CVE-2015-7450","vendorProject":"IBM","product":"WebSphere Application Server and Server Hypervisor Edition","vulnerabilityName":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7450","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2015-7450"},{"cveID":"CVE-2020-4430","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4430","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-4430"},{"cveID":"CVE-2020-4428","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.�","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4428","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-4428"},{"cveID":"CVE-2020-4427","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Security Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":[],"shortDescription":"IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4427","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-4427"},{"cveID":"CVE-2019-4716","vendorProject":"IBM","product":"Planning Analytics","vulnerabilityName":"IBM Planning Analytics Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-94"],"shortDescription":"IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM via TM1 scripting.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-4716","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2019-4716"}]}