Known vulnerabilities in WebSphere eXtreme Scale

Software CPE: cpe:2.3:a:ibm_corporation:websphere_extreme_scale:*:*:*:*:*:*:*:*
Total vulnerabilities: 85
Public exploits: 5
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere eXtreme Scale WebSphere eXtreme Scale is affected by 85 known vulnerabilities: 4 high, 45 medium, 36 low Critical High Medium Low

Vulnerabilities (85)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 82 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 84 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 81 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
8.6.1.6 PH70422 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 97 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 78 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
8.6.1.6 PH69398 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 119 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
8.6.1.6 PH69398 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 122 more
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
8.6.1.6 PH68541 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 78 more
#VU106083 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30474
CWE-200 Medium
No
No
8.6.1.6 PH68446 27.03.2025 SB2025032706
SB2025032709
SB20250403116
and 6 more
#VU106082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-27553
CWE-22 Medium
No
No
8.6.1.6 PH68446 27.03.2025 SB2025032706
SB2025032709
SB20250403116
and 17 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
8.6.1.6 PH70967 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 45 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Available
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 75 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more


Showing elements 1 - 20 out of 85