Known vulnerabilities in IBM i Access Client Solutions

Vendor: IBM Corporation
Software: IBM i Access Client Solutions
Software CPE: cpe:2.3:a:ibm_corporation:ibm_i_access_client_solutions:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 12
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM i Access Client Solutions IBM i Access Client Solutions is affected by 12 known vulnerabilities: 2 high, 7 medium, 3 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114385 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-54988		 CWE-611 Medium
Available
Exploited
 - 22.08.2025 SB2025082219
SB2025083007
SB2025083008
and 32 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 1.1.9.5 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-25710		 CWE-835 Medium
No
No
 1.1.9.5 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 102 more
#VU86281 - Exposure of sensitive information to an unauthorized actor
CVE-2024-22318		 CWE-200 Low
Available
No
 - 09.02.2024 SB2024020905
#VU85034 - Incorrect Authorization
CVE-2023-45185		 CWE-863 High
No
No
 1.1.9.4 05.01.2024 SB2024010535
#VU85033 - Improper control of a resource through its lifetime
CVE-2023-45184		 CWE-664 High
No
No
 1.1.9.4 05.01.2024 SB2024010535
#VU85032 - Improper control of a resource through its lifetime
CVE-2023-45182		 CWE-664 Medium
No
No
 1.1.9.4 05.01.2024 SB2024010535
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 1.1.9.5 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU76487 - Inadequate Encryption Strength
CVE-2023-32342		 CWE-326 Medium
No
No
 1.1.0.27 24.05.2023 SB2023052446
SB2023060817
SB2023061605
and 25 more
#VU75505 - Exposure of sensitive information to an unauthorized actor
CVE-2022-43928		 CWE-200 Medium
No
No
 1.1.9.2 26.04.2023 SB2023042616
SB2023060104
SB2023060927
and 4 more
#VU69508 - Untrusted Search Path
CVE-2022-40746		 CWE-426 Low
No
No
 1.1.9.1 22.11.2022 SB2022112252
#VU58977 - Deserialization of Untrusted Data
CVE-2021-4104		 CWE-502 Medium
No
No
 1.1.8.7 15.12.2021 SB2021121507
SB2021121647
SB2021121720
and 119 more