IBM AIX 7.2

productDE

cpe:/o:ibm:aix:7.2

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

26critical59high46medium2low

updated 2026-10-27

vulnerabilities (357)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-3427US	critical9.8OT critical	92.3% (100th)	KEV	no fix	2016-04-21	—
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	—
CVE-2016-0800US	medium5.9	82.1% (100th)	Exploit	no fix	2016-03-01	—
CVE-2023-38408US	critical9.8	79.7% (100th)	Exploit	no fix	2023-07-20	—
CVE-2016-0777US	medium6.5	63.5% (99th)	Exploit	no fix	2016-01-14	—
CVE-2023-51385US	medium6.5	19.8% (97th)	Exploit	no fix	2023-12-18	—
CVE-2024-0760US	—	4.68% (92nd)	Exploit	no fix	2024-07-23	—
CVE-2026-45447US	—	4.00% (90th)	Exploit	no fix	2026-06-09	—
CVE-2016-0702US	medium5.1	1.91% (80th)	Exploit	no fix	2016-03-03	—
CVE-2023-28528US	high7.8	1.46% (73rd)	Exploit	no fix	2023-04-28	—
CVE-2026-63072US	—	0.92% (60th)	Exploit	no fix	2026-08-25	—
CVE-2026-22016US	—	0.70% (53rd)	Exploit	no fix	2026-04-21	—
CVE-2025-40778US	—	0.67% (52nd)	Exploit	no fix	2025-10-22	—
CVE-2026-5950US	—	0.66% (51st)	Exploit	no fix	2026-05-20	—
CVE-2024-13176US	—	0.61% (49th)	Exploit	no fix	2025-01-20	—
CVE-2026-12087US	—	0.57% (47th)	Exploit	no fix	2026-06-15	—
CVE-2026-48962US	—	0.44% (38th)	Exploit	no fix	2026-05-27	—
CVE-2026-22018US	—	0.27% (19th)	Exploit	no fix	2026-04-21	—
CVE-2026-22013US	—OT elevated	0.26% (17th)	Exploit	no fix	2026-04-21	—
CVE-2026-35414US	high8.1	0.21% (12th)	Exploit	no fix	2026-04-02	—
CVE-2026-22007US	—OT elevated	0.12% (2nd)	Exploit	no fix	2026-04-21	—
CVE-2022-32215US	medium6.5	70.2% (99th)	—	no fix	2022-07-14	—
CVE-2024-2511US	—	52.4% (99th)	—	no fix	2024-04-08	—
CVE-2016-0799US	critical9.8	32.4% (98th)	—	no fix	2016-03-03	—
CVE-2016-0797US	high7.5	27.0% (98th)	—	no fix	2016-03-03	—
CVE-2016-0798US	high7.5	24.4% (98th)	—	no fix	2016-03-03	—
CVE-2016-0778US	high8.1	20.9% (98th)	—	no fix	2016-01-14	—
CVE-2024-12705US	—	18.4% (97th)	—	no fix	2025-01-29	—
CVE-2024-11187US	—	15.8% (97th)	—	no fix	2025-01-29	—
CVE-2025-8677US	—	10.7% (96th)	—	no fix	2025-10-22	—
CVE-2025-13878US	—	9.42% (95th)	—	no fix	2026-01-21	—
CVE-2016-0704US	medium5.9	6.90% (94th)	—	no fix	2016-03-02	—
CVE-2024-9143US	—	5.84% (93rd)	—	no fix	2024-10-16	—
CVE-2016-3443US	critical9.6	5.48% (93rd)	—	no fix	2016-04-21	—
CVE-2016-0703US	medium5.9	5.40% (93rd)	—	no fix	2016-03-02	—
CVE-2017-9048US	high7.5	4.85% (92nd)	—	no fix	2017-05-18	—
CVE-2016-0687US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2016-0686US	critical9.6	4.72% (92nd)	—	no fix	2016-04-21	—
CVE-2017-9050US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2017-9049US	high7.5	4.63% (92nd)	—	no fix	2017-05-18	—
CVE-2016-3449US	high8.3	4.01% (90th)	—	no fix	2016-04-21	—
CVE-2016-3425US	medium4.3	3.80% (90th)	—	no fix	2016-04-21	—
CVE-2016-0695US	medium5.9	3.40% (89th)	—	no fix	2016-04-21	—
CVE-2017-9047US	high7.5	3.19% (88th)	—	no fix	2017-05-18	—
CVE-2023-3341US	—	2.96% (87th)	—	no fix	2023-09-20	—
CVE-2016-3422US	medium4.3	2.80% (86th)	—	no fix	2016-04-21	—
CVE-2016-3426US	low3.1	2.79% (86th)	—	no fix	2016-04-21	—
CVE-2022-31081US	medium6.5	2.35% (84th)	—	no fix	2022-06-27	—
CVE-2025-9231US	—	2.24% (83rd)	—	no fix	2025-09-30	—
CVE-2023-4236US	—	2.21% (82nd)	—	no fix	2023-09-20	—

showing 50 of 357

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write55 CVEs
CWE-20Improper Input Validation28 CVEs
CWE-125Out-of-bounds Read27 CVEs
CWE-400Uncontrolled Resource Consumption21 CVEs
CWE-476NULL Pointer Dereference19 CVEs
CWE-190Integer Overflow or Wraparound17 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor17 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')15 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)357 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan