IBM Informix

productDE

cpe:/a:ibm:informix:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

1critical1high5medium1low

updated 2026-10-27

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44228US	critical10.0OT critical	100.0% (100th)	KEV	no fix	2021-12-10	—
CVE-2026-27739US	—	0.55% (46th)	Exploit	no fix	2026-02-25	—
CVE-2026-22610US	medium6.1	0.44% (38th)	Exploit	no fix	2026-01-10	—
CVE-2024-21138US	—	1.26% (69th)	—	no fix	2024-07-16	—
CVE-2024-21147US	—	1.14% (66th)	—	no fix	2024-07-16	—
CVE-2024-21144US	low3.7	1.06% (64th)	—	no fix	2024-07-16	—
CVE-2024-21131US	—	1.04% (64th)	—	no fix	2024-07-16	—
CVE-2024-21140US	—	0.94% (61st)	—	no fix	2024-07-16	—
CVE-2023-32342US	high7.5	0.92% (60th)	—	no fix	2023-05-30	—
CVE-2024-21145US	medium4.8	0.86% (58th)	—	no fix	2024-07-16	—
CVE-2024-31033US	—OT elevated	0.78% (56th)	—	no fix	2024-04-01	—
CVE-2025-66035US	—	0.72% (54th)	—	no fix	2025-11-26	—
CVE-2026-27970US	medium6.1	0.55% (46th)	—	no fix	2026-02-26	—
CVE-2024-27267US	medium5.9	0.45% (39th)	—	no fix	2024-08-14	—
CVE-2023-22091US	—	0.43% (37th)	—	no fix	2023-10-17	—
CVE-2025-66412US	medium5.4	0.41% (35th)	—	no fix	2025-12-01	—
CVE-2026-27738US	—	0.35% (29th)	—	no fix	2026-02-25	—

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-300Channel Accessible by Non-Endpoint1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.