IBM Corp. IBM i

Name: IBM Corp. IBM i
Brand: IBM Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

2critical9high2medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3711US	critical9.8	87.8% (100th)	—	no fix	2021-08-24	4 versions
CVE-2016-9842US	high8.8	5.20% (92nd)	—	no fix	2017-05-23	4 versions
CVE-2016-9840US	high8.8	4.88% (92nd)	—	no fix	2017-05-23	4 versions
CVE-2024-31879US	—	0.95% (61st)	—	no fix	2024-05-18	3 versions
CVE-2022-43859US	medium4.3	0.62% (49th)	—	no fix	2022-12-22	3 versions
CVE-2025-33108US	high8.8	0.60% (49th)	—	no fix	2025-06-14	2 versions
CVE-2025-36004US	—	0.54% (45th)	—	no fix	2025-06-25	4 versions
CVE-2026-1376US	—	0.53% (45th)	—	no fix	2026-03-17	≤ 7.6
CVE-2023-23470US	—	0.51% (44th)	—	no fix	2023-05-04	4 versions
CVE-2025-33103US	high8.8	0.45% (39th)	—	no fix	2025-05-17	5 versions
CVE-2024-31878US	medium5.3	0.45% (39th)	—	no fix	2024-06-07	4 versions
CVE-2024-55898US	—	0.45% (39th)	—	no fix	2025-02-24	4 versions
CVE-2025-2947US	critical9.8	0.44% (38th)	—	no fix	2025-04-17	≤ 7.6
CVE-2025-2950US	—	0.32% (24th)	—	no fix	2025-04-18	4 versions
CVE-2025-36371US	—	0.29% (21st)	—	no fix	2025-11-19	5 versions
CVE-2024-25050US	high7.8	0.26% (18th)	—	no fix	2024-04-28	4 versions
CVE-2025-36119US	high8.8	0.20% (10th)	—	no fix	2025-08-08	4 versions
CVE-2024-31890US	—	0.17% (6th)	—	no fix	2024-06-21	3 versions
CVE-2024-27275US	high7.8	0.15% (5th)	—	no fix	2024-06-15	4 versions
CVE-2023-40685US	high7.8	0.15% (4th)	—	no fix	2023-10-29	4 versions
CVE-2023-40686US	high7.8	0.14% (4th)	—	no fix	2023-10-29	4 versions

The flaw types (CWEs) most of these CVEs share.

CWE-250Execution with Unnecessary Privileges3 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-427Uncontrolled Search Path Element3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.