Skip to content

Known vulnerabilities in i

Is your version affected?

CVE Summary Score Published
CVE-2024-55896 IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper restrictions when rendering content via iFrames 5.4 Medium Jan 3, 2025
CVE-2024-51463 IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF) 5.4 Medium Dec 21, 2024
CVE-2024-51464 IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions 4.3 Medium Dec 21, 2024
CVE-2024-47104 IBM i 7.4 and 7.5 is vulnerable to an authenticated user gaining elevated privilege to a physical file 6.8 Medium Dec 18, 2024
CVE-2024-38330 IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified… 7.0 High Jul 8, 2024
CVE-2024-31890 IBM i 7.3, 7.4, and 7.5 product IBM TCP/IP Connectivity Utilities for i contains a local privilege escalation… 7.8 High Jun 21, 2024
CVE-2024-27275 IBM i privilege escalation 7.4 High Jun 15, 2024
CVE-2024-31870 IBM Db2 for i 7.2, 7.3, 7.4, and 7.5 supplies user defined table function is vulnerable to user enumeration by a local… 3.3 Low Jun 15, 2024
CVE-2024-31878 IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is vulnerable to SST user enumeration by a remote attacker 5.3 Medium Jun 7, 2024
CVE-2024-27264 IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an… 7.4 High May 22, 2024
CVE-2024-31879 IBM i 7.2, 7.3, and 7.4 could allow a remote attacker to execute arbitrary code leading to a denial of service of… 7.5 High May 18, 2024
CVE-2024-25050 IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler… 8.4 High Apr 28, 2024
CVE-2024-22346 Db2 for IBM i 7.2, 7.3, 7.4, and 7.5 infrastructure could allow a local user to gain elevated privileges due to an… 8.4 High Mar 14, 2024
CVE-2023-43064 Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an… 7.0 High Dec 25, 2023
CVE-2023-47741 IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser… 5.3 Medium Dec 18, 2023
CVE-2023-42006 IBM Administration Runtime Expert for i 7.2, 7.3, 7.4, and 7.5 could allow a local user to obtain sensitive… 8.4 High Dec 1, 2023
CVE-2023-40685 Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability 7.4 High Oct 29, 2023
CVE-2023-40686 Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability 4.9 Medium Oct 29, 2023
CVE-2023-40377 Backup, Recovery, and Media Services (BRMS) for IBM i 7.2, 7.3, and 7.4 contains a local privilege escalation… 4.9 Medium Oct 16, 2023
CVE-2023-40378 IBM Directory Server for IBM i contains a local privilege escalation vulnerability 4.9 Medium Oct 15, 2023
CVE-2023-40375 Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability 7.4 High Sep 28, 2023
CVE-2023-38721 The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability 8.4 High Aug 14, 2023
CVE-2023-30989 IBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability 8.4 High Jul 16, 2023
CVE-2023-30988 The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability 8.4 High Jul 16, 2023
CVE-2023-30990 IBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of… 8.6 High Jul 3, 2023

Other IBM products