IBM Tivoli Netcool/OMNIbus

productDE

cpe:/a:ibm:tivoli_netcool%2fomnibus:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

4critical8high4medium0low

updated 2026-10-28

vulnerabilities (70)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	—
CVE-2021-44832US	medium6.6	97.9% (100th)	Exploit	no fix	2021-12-28	—
CVE-2023-25194US	high8.8	95.8% (100th)	Exploit	no fix	2023-02-07	—
CVE-2026-104711US	—	1.39% (72nd)	Exploit	no fix	2026-10-05	—
CVE-2025-30749US	—	1.27% (70th)	Exploit	no fix	2025-07-15	—
CVE-2026-22008US	—	0.21% (11th)	Exploit	no fix	2026-04-21	—
CVE-2026-22003US	—	0.10% (1st)	Exploit	no fix	2026-04-21	—
CVE-2025-30761US	—	5.23% (92nd)	—	no fix	2025-07-15	—
CVE-2021-3918US	critical9.8	3.83% (90th)	—	no fix	2021-11-13	—
CVE-2023-23477US	critical9.8	1.95% (80th)	—	no fix	2023-02-03	—
CVE-2024-21217US	—	1.15% (67th)	—	no fix	2024-10-15	—
CVE-2023-42950US	high8.8	1.07% (65th)	—	no fix	2024-03-28	—
CVE-2024-54534US	critical9.8	1.04% (64th)	—	no fix	2024-12-12	—
CVE-2024-20926US	—	1.03% (64th)	—	no fix	2024-01-16	—
CVE-2024-21208US	—	1.01% (63rd)	—	no fix	2024-10-15	—
CVE-2026-34478US	high7.5	0.97% (62nd)	—	no fix	2026-04-10	—
CVE-2024-21235US	—	0.93% (60th)	—	no fix	2024-10-15	—
CVE-2024-20921US	—OT elevated	0.86% (58th)	—	no fix	2024-02-17	—
CVE-2026-104712US	—	0.84% (58th)	—	no fix	2026-10-05	—
CVE-2025-21587US	—	0.83% (58th)	—	no fix	2025-04-15	—
CVE-2024-21210US	—	0.81% (57th)	—	no fix	2024-10-15	—
CVE-2024-20919US	—	0.80% (56th)	—	no fix	2024-02-17	—
CVE-2024-20932US	—	0.78% (56th)	—	no fix	2024-01-16	—
CVE-2025-1948US	—	0.78% (56th)	—	no fix	2025-05-08	—
CVE-2025-50106US	—	0.75% (55th)	—	no fix	2025-07-15	—
CVE-2026-20652US	high7.5	0.70% (53rd)	—	no fix	2026-02-11	—
CVE-2025-12183US	—	0.70% (53rd)	—	no fix	2025-11-28	—
CVE-2024-21211US	—	0.67% (52nd)	—	no fix	2024-10-15	—
CVE-2025-30752US	—	0.67% (52nd)	—	no fix	2025-07-15	—
CVE-2026-34282US	—	0.64% (50th)	—	no fix	2026-04-21	—
CVE-2025-30698US	—	0.63% (50th)	—	no fix	2025-04-15	—
CVE-2025-50059US	—	0.61% (49th)	—	no fix	2025-07-15	—
CVE-2024-20923US	—	0.60% (49th)	—	no fix	2024-02-17	—
CVE-2025-30691US	—	0.60% (48th)	—	no fix	2025-04-15	—
CVE-2026-104713US	—	0.56% (46th)	—	no fix	2026-10-05	—
CVE-2024-13009US	—	0.55% (46th)	—	no fix	2025-05-08	—
CVE-2026-34479US	high7.5	0.53% (45th)	—	no fix	2026-04-10	—
CVE-2026-104714US	high8.8	0.53% (44th)	—	no fix	2026-10-05	—
CVE-2024-20955US	—	0.52% (44th)	—	no fix	2024-01-16	—
CVE-2025-6052US	high7.5	0.52% (44th)	—	no fix	2025-06-13	—
CVE-2026-40023US	medium5.3	0.50% (43rd)	—	no fix	2026-04-10	—
CVE-2025-30754US	—	0.47% (41st)	—	no fix	2025-07-15	—
CVE-2023-22051US	—	0.47% (41st)	—	no fix	2023-07-18	—
CVE-2026-47057US	—	0.47% (41st)	—	no fix	2026-07-21	—
CVE-2025-7425US	—	0.44% (39th)	—	no fix	2025-07-10	—
CVE-2024-7708US	—	0.44% (38th)	—	no fix	2026-07-14	—
CVE-2023-22091US	—	0.43% (37th)	—	no fix	2023-10-17	—
CVE-2024-20945US	—	0.41% (36th)	—	no fix	2024-02-17	—
CVE-2026-47013US	—	0.41% (35th)	—	no fix	2026-07-21	—

showing 50 of 70

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation19 CVEs
CWE-284Improper Access Control12 CVEs
CWE-400Uncontrolled Resource Consumption8 CVEs
CWE-502Deserialization of Untrusted Data7 CVEs
CWE-693Protection Mechanism Failure4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-190Integer Overflow or Wraparound3 CVEs
CWE-269Improper Privilege Management3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)70 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan