Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

IBM: actively exploited vulnerabilities

7 vulnerabilities in IBM products (Data Risk Manager, Aspera Faspex, InfoSphere BigInsights…) are in CISA’s catalog of exploited vulnerabilities. Last added: February 21, 2023.

IBM security advisories

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one IBM category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • Data Risk Manager 3 vulnerabilities · Security products
  • Aspera Faspex 1 vulnerability · File transfer (MFT)
  • InfoSphere BigInsights 1 vulnerability · Business apps and data
  • Planning Analytics (TM1) 1 vulnerability · Business apps and data
  • WebSphere Application Server 1 vulnerability · Web servers

Name used by CISA: IBM. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this IBM list.

  1. Rank 1IBM Aspera Faspex

    CVE-2022-47986

    Ransomware

    IBM Aspera Faspex Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Feb 21, 2023
    CISA deadline
    21 days
    CVSS severity
    9.8 (critical)

  2. Rank 2IBM WebSphere Application Server

    CVE-2015-7450

    CVE from 2015, added in 2022

    IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.

    Added more than a year ago: ranked by severity.

    Added
    Jan 10, 2022
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  3. Rank 3IBM Planning Analytics (TM1)

    CVE-2019-4716

    CVE from 2019, added in 2021

    IBM Planning Analytics Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  4. Rank 4IBM Data Risk Manager

    CVE-2020-4427

    IBM Data Risk Manager Security Bypass Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.8 (critical)

  5. Rank 5IBM Data Risk Manager

    CVE-2020-4428

    IBM Data Risk Manager Remote Code Execution Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    9.1 (critical)

  6. Rank 6IBM Data Risk Manager

    CVE-2020-4430

    IBM Data Risk Manager Directory Traversal Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    181 days
    CVSS severity
    4.3 (medium)

End of life: remove

These products are no longer supported: no patch is coming. Remove them or isolate them from the network.

  1. IBM InfoSphere BigInsights

    CVE-2013-3993

    RansomwareEnd of lifeCVE from 2013, added in 2022

    IBM InfoSphere BigInsights Invalid Input Vulnerability

    End-of-life product: no patch is coming; remove or isolate it.

    Added
    May 25, 2022
    CISA deadline
    21 days
    CVSS severity
    6.5 (medium)

Follow and verify

Get new IBM vulnerabilities: RSS feed (add it to Outlook, Teams, Slack or your feed reader).

Indicative classification, based on the vendor and product names given by CISA. How products are classified.