Known vulnerabilities in WebSphere eXtreme Scale

Software CPE: cpe:2.3:a:ibm_corporation:websphere_extreme_scale:*:*:*:*:*:*:*:*
Total vulnerabilities: 85
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting WebSphere eXtreme Scale WebSphere eXtreme Scale is affected by 85 known vulnerabilities: 4 high, 45 medium, 36 low Critical High Medium Low

Vulnerabilities (85)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126758 - Improper input validation
CVE-2026-22016
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 71 more
#VU126761 - Improper input validation
CVE-2026-22021
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 72 more
#VU126762 - Improper input validation
CVE-2026-22013
CWE-20 Medium
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126764 - Improper input validation
CVE-2026-22018
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126765 - Improper input validation
CVE-2026-22007
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU126766 - Improper input validation
CVE-2026-34268
CWE-20 Low
No
No
8.6.1.6 PH71616 iFix 22.04.2026 SB20260422123
SB20260422124
SB20260422125
and 70 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188
CWE-131 High
No
No
8.6.1.6 PH70422 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU121727 - Improper input validation
CVE-2026-21945
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 96 more
#VU121728 - Improper input validation
CVE-2026-21932
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 77 more
#VU121729 - Improper input validation
CVE-2026-21933
CWE-20 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 89 more
#VU121730 - Out-of-bounds read
CVE-2026-21925
CWE-125 Medium
No
No
8.6.1.6 PH70422 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU117483 - Improper input validation
CVE-2025-53066
CWE-20 Medium
No
No
8.6.1.6 PH69398 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057
CWE-20 Medium
No
No
8.6.1.6 PH69398 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU112940 - Improper input validation
CVE-2025-30761
CWE-20 Medium
No
No
8.6.1.6 PH68541 16.07.2025 SB2025071686
SB2025071687
SB2025071688
and 77 more
#VU106083 - Exposure of sensitive information to an unauthorized actor
CVE-2025-30474
CWE-200 Medium
No
No
8.6.1.6 PH68446 27.03.2025 SB2025032706
SB2025032709
SB20250403116
and 6 more
#VU103769 - Resource exhaustion
CVE-2025-25193
CWE-400 Low
No
No
8.6.1.6 PH68446 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 56 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160
CWE-79 Low
No
No
8.6.1.6 PH70967 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU58272 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41182
CWE-79 Medium
No
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022011944
SB2022011946
and 32 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184
CWE-79 Medium
Available
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183
CWE-79 Medium
No
No
8.6.1.6 PH70967 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more


Showing elements 1 - 20 out of 85