Skip to content

Known vulnerabilities in i

Is your version affected?

CVE Summary Score Published
CVE-2023-23470 IBM i 7.2, 7.3, 7.4, and 7.5 could allow an authenticated privileged administrator to gain elevated privileges in… 6.4 Medium May 4, 2023
CVE-2022-40746 IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to… 7.2 High Nov 21, 2022
CVE-2022-34358 IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to cross-site scripting 5.4 Medium Jul 13, 2022
CVE-2022-22495 IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection 6.3 Medium May 24, 2022
CVE-2022-22481 IBM Navigator for i 7.2, 7.3, and 7.4 (heritage version) could allow a remote attacker to obtain access to the web… 3.7 Low May 9, 2022
CVE-2021-39056 The IBM i 7.1, 7.2, 7.3, and 7.4 Extended Dynamic Remote SQL server (EDRSQL) could allow a remote authenticated user… 6.5 Medium Jan 13, 2022
CVE-2021-38876 IBM i 7.2, 7.3, and 7.4 is vulnerable to cross-site scripting 6.1 Medium Dec 30, 2021
CVE-2021-20501 IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to… 5.9 Medium Apr 21, 2021
CVE-2020-4345 IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local… 2.9 Low May 17, 2020
CVE-2019-4450 IBM i 7.2, 7.3, and 7.4 for i is vulnerable to cross-site scripting 6.1 Medium Nov 9, 2019
CVE-2019-4536 IBM i 7.4 users who have done a Restore User Profile (RSTUSRPRF) on a system which has been configured with Db2 Mirror… 6.7 Medium Aug 29, 2019
CVE-2019-4381 IBM i 7.27.3 Clustering could allow a local attacker to obtain sensitive information, caused by the use of advanced node… 5.9 Medium Jun 14, 2019
CVE-2019-4040 IBM I 7.2 and 7.3 is vulnerable to cross-site scripting 6.1 Medium Jan 31, 2019
CVE-2017-1460 IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin Not rated Jul 31, 2017

Other IBM products