ibm
Safeguard articles tagged "ibm" — guides, analysis, and best practices for software supply chain and application security.
8 articles
CVE-2019-4716: IBM Planning Analytics Remote Code Execution Vulnerability
CVE-2019-4716 affects IBM Planning Analytics and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-4428: IBM Data Risk Manager Remote Code Execution Vulnerability
CVE-2020-4428 affects IBM Data Risk Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-4427: IBM Data Risk Manager Security Bypass Vulnerability
CVE-2020-4427 affects IBM Data Risk Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-4430: IBM Data Risk Manager Directory Traversal Vulnerability
CVE-2020-4430 affects IBM Data Risk Manager and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2015-7450: IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.
CVE-2015-7450 affects IBM WebSphere Application Server and Server Hypervisor Edition and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-10.
CVE-2013-3993: IBM InfoSphere BigInsights Invalid Input Vulnerability
CVE-2013-3993 affects IBM InfoSphere BigInsights and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-05-25.
CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability
CVE-2022-47986 affects IBM Aspera Faspex and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-02-21.
CVE-2026-9198: IBM Langflow Code Injection Vulnerability
CVE-2026-9198 affects IBM Langflow and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-08-04.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.