ibm
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 5, 2026 to present
1000
Total CVEs
393
Critical+High
4
Exploited
153
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
153
Critical/High
Risk Level
48/100
medium
⚠️ 4 Active Exploits🆕 3Fresh (<7d)📈 104 in Last 30 Days
Severity Distribution
Critical
102High
291Medium
305Low
34Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
155Age Distribution
Common Weaknesses (CWE)
1
XSS
61
2
SSRF
33
3
Path Traversal
30
4
Input Validation
27
5
Code Injection
26
Most Affected Products
1. Apache Tomcat310
2. Linux Linux kernel178
3. IBM Engineering Lifecycle Management122
4. IBM IBM® Db2®115
5. OpenSSL OpenSSL110
Recent Vulnerabilities
See more →IBM-7280923
unknown
7/23/2026🔧 No Patch
CVE-2026-3482
CVSS 5.3medium
IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
7/21/2026🔧 No Patch
IBM-7280657
unknown
7/21/2026🔧 No Patch
CVE-2026-15995
CVSS 5.4medium
IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use
7/17/2026🔧 No Patch
IBM-7280311
unknown
7/17/2026🔧 No Patch
CVE-2026-9171
CVSS 7.5EPSS 0%high
Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
7/16/2026🔧 No Patch
IBM-7280226
unknown
7/16/2026🔧 No Patch
CVE-2026-9322
unknown
7/16/2026🔧 No Patch
CVE-2026-14971
CVSS 3.9low
This PowerVM Novalink update is being released to address
7/16/2026🔧 No Patch
IBM-7280225
unknown
7/16/2026🔧 No Patch
Monitor ibm in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.