IBM i

Name: IBM i
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

18critical41high36medium2low

updated 2026-10-28

vulnerabilities (181)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-51464US	—OT elevated	1.41% (73rd)	Exploit	no fix	2024-12-21	≤ 7.3, 7.4, 7.5
CVE-2023-30990US	critical9.8	1.01% (63rd)	Exploit	no fix	2023-07-04	≤ 7.2, 7.3, 7.4, 7.5
CVE-2024-51463US	—	0.85% (58th)	Exploit	no fix	2024-12-21	≤ 7.3, 7.4, 7.5
CVE-2026-5950US	—	0.66% (51st)	Exploit	SJ10988	2026-05-20	4 versions
CVE-2022-22495US	high8.8	2.22% (83rd)	—	no fix	2022-05-24	3 versions
CVE-2026-5946US	—	1.94% (80th)	—	SJ10866	2026-05-20	4 versions
CVE-2026-3593US	critical9.8	1.54% (75th)	—	SJ10979	2026-05-20	4 versions
CVE-2026-5947US	medium5.9	1.39% (72nd)	—	SJ10979	2026-05-20	4 versions
CVE-2017-1460US	high7.5	1.37% (72nd)	—	no fix	2017-07-31	4 versions
CVE-2021-20501US	high8.2	1.34% (71st)	—	no fix	2021-04-21	4 versions
CVE-2019-4040US	medium6.1	1.32% (71st)	—	no fix	2019-01-31	2 versions
CVE-2021-39056US	medium6.5	1.31% (71st)	—	no fix	2022-01-13	4 versions
CVE-2022-22481US	medium5.3	1.23% (69th)	—	no fix	2022-05-09	3 versions
CVE-2026-3039US	—	1.09% (65th)	—	SJ10866	2026-05-20	4 versions
CVE-2024-31879US	—	0.95% (61st)	—	no fix	2024-05-18	≤ 7.2, 7.3, 7.4
CVE-2026-17083US	—	0.80% (56th)	—	no fix	2026-08-12	4 versions
CVE-2026-17218US	—	0.80% (56th)	—	no fix	2026-08-12	4 versions
CVE-2026-17642US	—	0.79% (56th)	—	no fix	2026-08-12	4 versions
CVE-2026-17417US	—	0.79% (56th)	—	no fix	2026-08-12	4 versions
CVE-2026-16906US	—	0.79% (56th)	—	no fix	2026-08-12	2 versions
CVE-2026-17223US	—	0.75% (55th)	—	no fix	2026-08-13	4 versions
CVE-2026-16975US	—	0.75% (55th)	—	no fix	2026-08-13	4 versions
CVE-2026-17110US	—	0.75% (55th)	—	no fix	2026-08-12	4 versions
CVE-2026-16860US	critical9.9	0.75% (55th)	—	no fix	2026-08-12	4 versions
CVE-2026-16674US	—	0.75% (55th)	—	no fix	2026-08-13	4 versions
CVE-2026-18669US	—	0.75% (55th)	—	no fix	2026-08-12	4 versions
CVE-2019-4450US	medium6.1	0.73% (54th)	—	no fix	2019-11-09	3 versions
CVE-2026-17206US	critical9.8	0.67% (52nd)	—	no fix	2026-08-13	4 versions
CVE-2026-18683US	—	0.66% (52nd)	—	no fix	2026-08-12	4 versions
CVE-2026-17266US	—	0.66% (51st)	—	no fix	2026-08-12	4 versions
CVE-2021-38876US	medium6.1	0.65% (51st)	—	no fix	2021-12-30	3 versions
CVE-2026-17101US	critical9.6	0.63% (50th)	—	no fix	2026-08-13	4 versions
CVE-2026-16867US	critical9.8	0.62% (49th)	—	no fix	2026-08-13	4 versions
CVE-2026-16908US	high8.8	0.58% (48th)	—	no fix	2026-08-13	4 versions
CVE-2026-16907US	—	0.57% (47th)	—	no fix	2026-08-12	4 versions
CVE-2026-17057US	critical9.1OT elevated	0.57% (47th)	—	no fix	2026-09-04	4 versions
CVE-2026-17220US	—	0.56% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-17199US	high7.5	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-17004US	high7.5	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-17229US	—	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-16887US	—	0.55% (46th)	—	no fix	2026-08-13	≤ 7.6
CVE-2026-17271US	—	0.55% (46th)	—	no fix	2026-08-12	4 versions
CVE-2026-16931US	—	0.55% (46th)	—	no fix	2026-08-12	4 versions
CVE-2026-18846US	high7.5	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-18077US	—	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-16982US	—	0.55% (46th)	—	no fix	2026-08-13	4 versions
CVE-2026-18235US	—	0.54% (45th)	—	no fix	2026-08-12	4 versions
CVE-2026-17095US	—	0.54% (45th)	—	no fix	2026-08-12	4 versions
CVE-2025-36004US	—	0.54% (45th)	—	no fix	2025-06-25	4 versions
CVE-2026-17094US	high7.1	0.54% (45th)	—	no fix	2026-08-12	4 versions

showing 50 of 181

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-269Improper Privilege Management21 CVEs
CWE-787Out-of-bounds Write21 CVEs
CWE-125Out-of-bounds Read11 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')11 CVEs
CWE-427Uncontrolled Search Path Element10 CVEs
CWE-287Improper Authentication8 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')8 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)162 CVEs
DECERT-Bund (BSI CSAF)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan