IBM Security Identity Governance and Intelligence

Name: IBM Security Identity Governance and Intelligence
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical9high25medium2low

updated 2026-10-29

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1756US	high7.5	10.6% (96th)	Exploit	no fix	2018-09-07	2 versions
CVE-2020-4795US	high8.2	1.74% (78th)	—	no fix	2021-02-09	≤ 5.2.6
CVE-2020-4958US	critical9.8OT elevated	1.72% (77th)	—	no fix	2021-01-21	≤ 5.2.6
CVE-2017-1395US	medium5.9	1.71% (77th)	—	no fix	2018-07-13	7 versions
CVE-2018-1757US	medium5.3OT elevated	1.71% (77th)	—	no fix	2018-09-07	2 versions
CVE-2017-1411US	high7.5	1.47% (74th)	—	no fix	2018-08-06	7 versions
CVE-2020-4966US	medium4.3	1.45% (73rd)	—	no fix	2021-01-21	≤ 5.2.6
CVE-2020-4246US	high7.1	1.40% (72nd)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2017-1409US	medium5.3	1.30% (70th)	—	no fix	2018-08-06	7 versions
CVE-2017-1368US	medium6.5	1.26% (70th)	—	no fix	2018-08-06	7 versions
CVE-2018-1945US	medium6.1	1.21% (68th)	—	no fix	2019-02-21	9 versions
CVE-2020-4245US	high7.5	1.21% (68th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2017-1367US	medium5.3	1.19% (68th)	—	no fix	2018-07-13	7 versions
CVE-2020-4995US	medium5.3	1.15% (67th)	—	no fix	2021-02-09	≤ 5.2.6
CVE-2018-1948US	medium4.3	1.14% (66th)	—	no fix	2019-02-21	9 versions
CVE-2020-4232US	high7.5	1.13% (66th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2020-4244US	medium5.3	1.07% (65th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2020-4248US	low2.7	0.98% (62nd)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2018-1950US	medium4.3	0.98% (62nd)	—	no fix	2019-02-21	9 versions
CVE-2018-1949US	medium4.3	0.98% (62nd)	—	no fix	2019-02-21	9 versions
CVE-2017-1412US	medium4.3	0.97% (62nd)	—	no fix	2018-08-06	7 versions
CVE-2017-1366US	high7.5	0.96% (62nd)	—	no fix	2018-08-06	7 versions
CVE-2020-4249US	medium6.5OT elevated	0.91% (60th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2020-4243US	low3.7	0.91% (60th)	—	no fix	2020-08-05	≤ 5.2.6
CVE-2020-4957US	medium5.3	0.91% (60th)	—	no fix	2022-05-17	≤ 5.2.6
CVE-2018-1947US	medium6.1	0.89% (59th)	—	no fix	2019-02-21	9 versions
CVE-2018-1944US	critical9.8OT elevated	0.84% (58th)	—	no fix	2019-02-21	9 versions
CVE-2020-4231US	medium6.5	0.81% (57th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2017-1396US	high8.1	0.81% (57th)	—	no fix	2018-08-06	7 versions
CVE-2020-4233US	medium5.3OT elevated	0.77% (55th)	—	no fix	2020-05-28	≤ 5.2.6
CVE-2020-4970US	medium5.9OT elevated	0.74% (54th)	—	no fix	2022-05-19	3 versions
CVE-2018-1946US	high7.5	0.73% (54th)	—	no fix	2019-02-21	9 versions
CVE-2020-4969US	medium5.9OT elevated	0.67% (52nd)	—	no fix	2021-01-21	≤ 5.2.6
CVE-2020-4790US	medium6.5	0.60% (49th)	—	no fix	2021-02-09	≤ 5.2.6
CVE-2020-4996US	medium5.5	0.37% (31st)	—	no fix	2021-02-09	≤ 5.2.6
CVE-2017-1755US	medium6.7	0.36% (30th)	—	no fix	2018-08-06	7 versions
CVE-2020-4968US	medium6.5OT elevated	0.33% (26th)	—	no fix	2021-01-21	≤ 5.2.6
CVE-2020-4791US	medium5.3	0.30% (23rd)	—	no fix	2021-02-09	≤ 5.2.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-384Session Fixation3 CVEs
CWE-306Missing Authentication for Critical Function2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan