Known vulnerabilities in IBM i - page 3

Vendor: IBM Corporation
Software: IBM i
Software CPE: cpe:2.3:o:ibm_corporation:ibm_i:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 253
Public exploits: 20
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i IBM i is affected by 253 known vulnerabilities: 2 critical, 18 high, 155 medium, 78 low Critical High Medium Low

Vulnerabilities (253)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117610 - Insufficient Verification of Data Authenticity
CVE-2025-40778		 CWE-345 Medium
Available
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 60 more
#VU117604 - Predictable Seed in Pseudo-Random Number Generator (PRNG)
CVE-2025-40780		 CWE-337 Medium
No
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 41 more
#VU117577 - Resource exhaustion
CVE-2025-8677		 CWE-400 Medium
No
No
 - 23.10.2025 SB2025102373
SB2025102393
SB20251023133
and 28 more
#VU116213 - Out-of-bounds write
CVE-2025-9230		 CWE-787 Medium
No
No
 - 01.10.2025 SB2025100119
SB2025100132
SB2025100133
and 108 more
#VU112940 - Improper input validation
CVE-2025-30761		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU112941 - Improper input validation
CVE-2025-30754		 CWE-20 Medium
No
No
 - 16.07.2025 SB2025071686
SB2025071692
SB2025071783
and 108 more
#VU112937 - Improper input validation
CVE-2025-30749		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 101 more
#VU112938 - Improper input validation
CVE-2025-50106		 CWE-20 High
No
No
 - 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 100 more
#VU112132 - Stack-based buffer overflow
CVE-2025-4447		 CWE-121 Medium
No
No
 - 03.07.2025 SB2025070315
SB2025070316
SB2025070319
and 54 more
#VU107520 - Improper input validation
CVE-2025-21587		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 103 more
#VU107521 - Improper input validation
CVE-2025-30698		 CWE-20 Medium
No
No
 - 16.04.2025 SB20250416145
SB20250416146
SB20250416147
and 93 more
#VU104034 - Improper input validation
CVE-2025-26466		 CWE-20 Medium
Available
No
 - 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU103437 - Resource Management Errors
CVE-2024-12705		 CWE-399 Medium
No
No
 - 29.01.2025 SB2025012964
SB2025012962
SB2025012965
and 15 more
#VU103436 - Resource exhaustion
CVE-2024-11187		 CWE-400 Medium
No
No
 - 29.01.2025 SB2025012962
SB2025012964
SB2025012965
and 83 more
#VU99261 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-47875		 CWE-79 Medium
No
No
 - 22.10.2024 SB20241022382
SB20241022383
SB20241022392
and 27 more
#VU93515 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2006-5051		 CWE-362 Critical
No
No
 - 01.07.2024 SB2006092801
SB2024071109
SB2024071110
and 5 more
#VU93514 - Exposure of sensitive information to an unauthorized actor
CVE-2024-39894		 CWE-200 Low
No
No
 - 01.07.2024 SB2024070144
SB2024070956
SB2024071076
and 7 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 - 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU74149 - Security Features
CVE-2023-0466		 CWE-254 Low
No
No
 - 28.03.2023 SB2023032241
SB2023040666
SB2023040730
and 86 more
#VU13054 - Double Free
CVE-2017-14952		 CWE-415 High
No
No
 - 30.05.2018 SB2018052513
SB2017102307
SB2017102308
and 6 more


Showing elements 41 - 60 out of 253