Known vulnerabilities in IBM Global High Availability Mailbox

Known vulnerabilities in IBM Global High Availability Mailbox

Vendor: IBM Corporation

Software: IBM Global High Availability Mailbox

Software CPE: cpe:2.3:a:ibm_corporation:ibm_global_high_availability_mailbox:*:*:*:*:*:*:*:*

Website: https://www.ibm.com/us-en

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU125100 - Improper Access Control CVE-2026-27314	CWE-284	Low	No	No	6.2.0.6 6212, 6.2.0.6 6221	07.04.2026	SB20260407105 SB2026080431
#VU125099 - Resource exhaustion CVE-2026-32588	CWE-400	Low	No	No	6.2.0.6 6212, 6.2.0.6 6221	07.04.2026	SB20260407105 SB2026080431
#VU121007 - Exposure of sensitive information to an unauthorized actor CVE-2025-66566	CWE-200	Medium	No	No	6.2.0.6 6212, 6.2.0.6 6221	07.01.2026	SB2026010702 SB2026010705 SB2026010706 and 28 more
#VU121006 - Out-of-bounds read CVE-2025-12183	CWE-125	Medium	No	No	6.2.0.6 6212, 6.2.0.6 6221	07.01.2026	SB2026010701 SB2026010705 SB2026010706 and 14 more
#VU83241 - Information Exposure Through Log Files CVE-2023-44483	CWE-532	Medium	No	No	6.2.0.1	17.11.2023	SB2023111724 SB2023111747 SB2023120143 and 76 more
#VU82350 - Resource Management Errors CVE-2023-46158	CWE-399	Medium	No	No	6.2.0.1	24.10.2023	SB2023102444 SB2023120144 SB2023122104 and 30 more
#VU81728 - Resource exhaustion CVE-2023-44487	CWE-400	High	Available	Exploited	6.2.0.1	10.10.2023	SB2023101023 SB2023101024 SB2023101037 and 648 more
#VU79665 - Improper input validation CVE-2023-38737	CWE-20	Medium	No	No	-	17.08.2023	SB2023081721 SB2023100203 SB2023100308 and 20 more
#VU78805 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-34478	CWE-22	High	No	No	6.2.0.4	01.08.2023	SB2023080109 SB2023111053 SB2023111054 and 6 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201	CWE-90	Medium	No	No	-	17.07.2023	SB2023071740 SB2023071742 SB2023071902 and 91 more
#VU70385 - Deserialization of Untrusted Data CVE-2022-1471	CWE-502	High	Available	No	6.2.0.3	15.12.2022	SB2022121539 SB2022121540 SB2022121928 and 124 more
#VU58977 - Deserialization of Untrusted Data CVE-2021-4104	CWE-502	Medium	No	No	6.0.3.6	15.12.2021	SB2021121507 SB2021121647 SB2021121720 and 119 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	6.0.1.2.1, 6.0.2.3.1, 6.0.3.5.1, 6.1.0.4.1, 6.1.1.0.1	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more