IBM AIX

Name: IBM AIX
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

23critical48high45medium0low

updated 2026-10-26

vulnerabilities (275)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11187US	—	5.23% (92nd)	Exploit	7.3	2026-01-27	2 versions
CVE-2023-28528US	high7.8	1.46% (73rd)	Exploit	no fix	2023-04-28	≤ 7.1, 7.2, 7.3, VIOS 3.1
CVE-2026-2005US	—	1.37% (72nd)	Exploit	no fix	2026-02-12	≤ vers:unknown/*
CVE-2025-69421US	high7.5	0.94% (61st)	Exploit	7.2	2026-01-27	2 versions
CVE-2025-69420US	—	0.92% (60th)	Exploit	7.2	2026-01-27	2 versions
CVE-2026-22016US	—	0.70% (53rd)	Exploit	no fix	2026-04-21	≤ vers:unknown/*
CVE-2025-69419US	—	0.61% (49th)	Exploit	7.2	2026-01-27	2 versions
CVE-2026-12087US	—	0.57% (47th)	Exploit	no fix	2026-06-15	≤ vers:unknown/*
CVE-2026-48962US	—	0.44% (38th)	Exploit	no fix	2026-05-27	≤ vers:unknown/*
CVE-2026-6475US	—	0.41% (35th)	Exploit	no fix	2026-05-14	≤ vers:unknown/*
CVE-2026-22018US	—	0.27% (19th)	Exploit	no fix	2026-04-21	≤ vers:unknown/*
CVE-2026-22013US	—OT elevated	0.26% (17th)	Exploit	no fix	2026-04-21	≤ vers:unknown/*
CVE-2026-22007US	—OT elevated	0.12% (2nd)	Exploit	no fix	2026-04-21	≤ vers:unknown/*
CVE-2018-1383US	critical9.1	2.68% (86th)	—	no fix	2018-02-13	3 versions
CVE-2026-16865US	—	1.90% (80th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2017-1541US	high7.3	1.51% (74th)	—	no fix	2017-10-04	4 versions
CVE-2026-16850US	—	1.50% (74th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-19446US	—	1.47% (73rd)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-2004US	—	1.34% (71st)	—	no fix	2026-02-12	≤ vers:unknown/*
CVE-2023-36328US	critical9.8	1.26% (70th)	—	no fix	2023-09-01	2 versions
CVE-2022-22351US	high8.6	1.19% (68th)	—	no fix	2022-03-07	3 versions
CVE-2026-2006US	—	1.16% (67th)	—	no fix	2026-02-12	≤ vers:unknown/*
CVE-2024-56346US	—	1.13% (66th)	—	no fix	2025-03-18	2 versions
CVE-2026-6473US	—	1.01% (63rd)	—	no fix	2026-05-14	≤ vers:unknown/*
CVE-2026-18832US	critical9.8	0.92% (60th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17436US	critical9.8	0.92% (60th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17142US	—	0.92% (60th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2024-56347US	—	0.92% (60th)	—	no fix	2025-03-18	2 versions
CVE-2024-0914US	medium5.9	0.88% (59th)	—	no fix	2024-01-31	2 versions
CVE-2026-16882US	—	0.86% (58th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2025-15468US	—	0.82% (57th)	—	7.3	2026-01-27	2 versions
CVE-2026-17157US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17152US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17141US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17122US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17040US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-16913US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16894US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16885US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16872US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16864US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16862US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16845US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-17160US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17136US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-17118US	—	0.80% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*
CVE-2026-16919US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16917US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-16840US	—	0.80% (56th)	—	no fix	2026-08-19	≤ vers:unknown/*
CVE-2026-18835US	—	0.79% (56th)	—	no fix	2026-08-20	≤ vers:unknown/*

showing 50 of 275

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write47 CVEs
CWE-400Uncontrolled Resource Consumption30 CVEs
CWE-269Improper Privilege Management21 CVEs
CWE-20Improper Input Validation15 CVEs
CWE-125Out-of-bounds Read14 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')14 CVEs
CWE-190Integer Overflow or Wraparound12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs

sources (3)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)194 CVEs
EUEU Vulnerability Database (ENISA)67 CVEs
DECERT-Bund (BSI CSAF)22 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan