Cyberfeed6 › Vendors › IBM
CISA lists 8 IBM vulnerabilities as exploited in real attacks, and 2 of them are known to be used in ransomware campaigns. Most entries concern Data Risk Manager, Langflow, Aspera Faspex, InfoSphere BigInsights.
Showing the 8 most recently added of 8. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-9198IBM Langflow Code Injection Vulnerability | Langflow | 2026-08-04 | Critical (9.8) | No | Vendor notice |
| CVE-2022-47986IBM Aspera Faspex Code Execution Vulnerability | Aspera Faspex | 2023-02-21 | Critical (9.8) | Yes | Vendor notice |
| CVE-2013-3993IBM InfoSphere BigInsights Invalid Input Vulnerability | InfoSphere BigInsights | 2022-05-25 | Medium (6.5) | Yes | |
| CVE-2015-7450IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. | WebSphere Application Server and Server Hypervisor Edition | 2022-01-10 | Critical (9.8) | No | |
| CVE-2020-4430IBM Data Risk Manager Directory Traversal Vulnerability | Data Risk Manager | 2021-11-03 | Medium (4.3) | No | |
| CVE-2020-4428IBM Data Risk Manager Remote Code Execution Vulnerability | Data Risk Manager | 2021-11-03 | Critical (9.1) | No | |
| CVE-2020-4427IBM Data Risk Manager Security Bypass Vulnerability | Data Risk Manager | 2021-11-03 | Critical (9.0) | No | |
| CVE-2019-4716IBM Planning Analytics Remote Code Execution Vulnerability | Planning Analytics | 2021-11-03 | Critical (10.0) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.