IBM InfoSphere Data Replication

Name: IBM InfoSphere Data Replication
Brand: IBM

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical2high3medium0low

updated 2026-10-28

vulnerabilities (10)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-33937US	—	1.91% (80th)	Exploit	12.1.5.0-43	2026-03-27	< 12.1.5.0-43
CVE-2020-4821US	critical9.8	2.00% (81st)	—	no fix	2021-07-16	≤ 11.4
CVE-2023-33850US	high7.5	1.17% (67th)	—	11.4.0.5.5752	2023-08-22	2 versions
CVE-2026-33938US	—	0.72% (54th)	—	12.1.5.0-43	2026-03-27	< 12.1.5.0-43
CVE-2026-33940US	—	0.71% (54th)	—	12.1.5.0-43	2026-03-27	< 12.1.5.0-43
CVE-2023-33857US	medium5.3	0.71% (53rd)	—	11.4.0.5.5702	2023-07-17	< 11.4.0.5.5702
CVE-2026-33939US	—	0.63% (50th)	—	12.1.5.0-43	2026-03-27	< 12.1.5.0-43
CVE-2024-56468US	medium6.5	0.42% (36th)	—	no fix	2025-07-08	≤ VSAM for z/OS <11.4
CVE-2026-33916US	medium4.7	0.28% (20th)	—	12.1.5.0-43	2026-03-27	< 12.1.5.0-43
CVE-2025-36156US	high7.8	0.13% (2nd)	—	11.4.0.22	2025-10-07	< 11.4.0.22

The flaw types (CWEs) most of these CVEs share.

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-248Uncaught Exception1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.