Known vulnerabilities in IBM i - page 2

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 269
Public exploits: 20
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 269 known vulnerabilities: 2 critical, 19 high, 164 medium, 84 low Critical High Medium Low

Vulnerabilities (269)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140846 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-75838		 CWE-79 Low
No
No
 - 04.08.2026 SB2026080415
SB2026092001
SB2026092002
and 6 more
#VU134270 - Use After Free
CVE-2026-45447		 CWE-416 High
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 49 more
#VU134275 - Improper Initialization
CVE-2026-45445		 CWE-665 Low
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 24 more
#VU134276 - Heap-based Buffer Overflow
CVE-2026-7383		 CWE-122 Low
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 36 more
#VU134282 - NULL Pointer Dereference
CVE-2026-42767		 CWE-476 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610122
and 25 more
#VU134287 - Improper Verification of Cryptographic Signature
CVE-2026-45446		 CWE-347 Medium
No
No
 - 10.06.2026 SB20260610118
SB20260610119
SB20260610123
and 20 more
#VU128473 - Improper input validation
CVE-2026-35386		 CWE-20 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 17 more
#VU128475 - Improper Privilege Management
CVE-2026-35385		 CWE-269 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 34 more
#VU128476 - Improper Access Control
CVE-2026-35387		 CWE-284 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 18 more
#VU128477 - Improper Authorization
CVE-2026-35388		 CWE-285 Low
No
No
 - 29.04.2026 SB2026042988
SB2026042990
SB2026042992
and 19 more
#VU125564 - Use After Free
CVE-2026-28387		 CWE-416 High
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 30 more
#VU125565 - NULL Pointer Dereference
CVE-2026-28388		 CWE-476 Low
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 40 more
#VU125566 - NULL Pointer Dereference
CVE-2026-28389		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 32 more
#VU125567 - NULL Pointer Dereference
CVE-2026-28390		 CWE-476 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040992
and 52 more
#VU125568 - Heap-based Buffer Overflow
CVE-2026-31789		 CWE-122 Medium
No
No
 - 09.04.2026 SB2026040943
SB2026040944
SB2026040945
and 23 more
#VU124616 - Resource exhaustion
CVE-2026-1519		 CWE-400 Medium
No
No
 - 25.03.2026 SB20260325207
SB20260325210
SB20260325211
and 43 more
#VU123895 - Resource exhaustion
CVE-2026-27171		 CWE-400 Medium
No
No
 - 11.03.2026 SB2026021955
SB2026031155
SB2026031156
and 10 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985		 CWE-158 Low
No
No
 - 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 26 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984		 CWE-78 Low
No
No
 - 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 28 more


Showing elements 21 - 40 out of 269