ibm security identity governance and intelligence

Name: ibm security identity governance and intelligence
Brand: ibm

productUS

cpe:2.3:a:ibm:security_identity_governance_and_intelligence:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical11high24medium2low

updated 2026-10-29

vulnerabilities (39)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-1756US	high7.5	10.6% (96th)	Exploit	no fix	2018-09-07	2 versions
CVE-2017-1407US	high8.8	3.42% (89th)	—	no fix	2017-09-28	2 versions
CVE-2020-4795US	high8.2	1.74% (78th)	—	no fix	2021-02-09	= 5.2.6
CVE-2020-4958US	critical9.8OT elevated	1.72% (77th)	—	no fix	2021-01-21	= 5.2.6
CVE-2017-1395US	medium5.9	1.71% (77th)	—	no fix	2018-07-13	5.2 → 5.2.3.2
CVE-2018-1757US	medium5.3OT elevated	1.71% (77th)	—	no fix	2018-09-07	2 versions
CVE-2017-1483US	high8.6OT elevated	1.49% (74th)	—	no fix	2017-09-28	2 versions
CVE-2017-1411US	high7.5	1.47% (74th)	—	no fix	2018-08-06	7 versions
CVE-2020-4966US	medium4.3	1.45% (73rd)	—	no fix	2021-01-21	= 5.2.6
CVE-2020-4246US	high7.1	1.40% (72nd)	—	no fix	2020-05-28	= 5.2.6
CVE-2017-1409US	medium5.3	1.30% (70th)	—	no fix	2018-08-06	7 versions
CVE-2017-1368US	medium6.5	1.26% (70th)	—	no fix	2018-08-06	7 versions
CVE-2018-1945US	medium6.1	1.21% (68th)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2020-4245US	high7.5	1.21% (68th)	—	no fix	2020-05-28	= 5.2.6
CVE-2017-1367US	medium5.3	1.19% (68th)	—	no fix	2018-07-13	5.2.0 → 5.2.3.2
CVE-2020-4995US	medium5.3	1.15% (67th)	—	no fix	2021-02-09	= 5.2.6
CVE-2018-1948US	medium4.3	1.14% (66th)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2020-4232US	high7.5	1.13% (66th)	—	no fix	2020-05-28	= 5.2.6
CVE-2020-4244US	medium5.3	1.07% (65th)	—	no fix	2020-05-28	= 5.2.6
CVE-2020-4248US	low2.7	0.98% (62nd)	—	no fix	2020-05-28	= 5.2.6
CVE-2018-1950US	medium4.3	0.98% (62nd)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2018-1949US	medium4.3	0.98% (62nd)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2017-1412US	medium4.3	0.97% (62nd)	—	no fix	2018-08-06	7 versions
CVE-2017-1366US	high7.5	0.96% (62nd)	—	no fix	2018-08-06	7 versions
CVE-2020-4249US	medium6.5OT elevated	0.91% (60th)	—	no fix	2020-05-28	= 5.2.6
CVE-2020-4243US	low3.7	0.91% (60th)	—	no fix	2020-08-05	= 5.2.6
CVE-2020-4957US	medium5.3	0.91% (60th)	—	no fix	2022-05-17	= 5.2.6
CVE-2018-1947US	medium6.1	0.89% (59th)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2018-1944US	critical9.8OT elevated	0.84% (58th)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2020-4231US	medium6.5	0.81% (57th)	—	no fix	2020-05-28	= 5.2.6
CVE-2017-1396US	high8.1	0.81% (57th)	—	no fix	2018-08-06	7 versions
CVE-2020-4233US	medium5.3OT elevated	0.77% (55th)	—	no fix	2020-05-28	= 5.2.6
CVE-2018-1946US	high7.5	0.73% (54th)	—	no fix	2019-02-21	5.2 → 5.2.4.1
CVE-2020-4969US	medium5.9OT elevated	0.67% (52nd)	—	no fix	2021-01-21	= 5.2.6
CVE-2020-4790US	medium6.5	0.60% (49th)	—	no fix	2021-02-09	= 5.2.6
CVE-2020-4996US	medium5.5	0.37% (31st)	—	no fix	2021-02-09	= 5.2.6
CVE-2017-1755US	medium6.7	0.36% (30th)	—	no fix	2018-08-06	7 versions
CVE-2020-4968US	medium6.5OT elevated	0.33% (26th)	—	no fix	2021-01-21	= 5.2.6
CVE-2020-4791US	medium5.3	0.30% (23rd)	—	no fix	2021-02-09	= 5.2.6

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor9 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-384Session Fixation3 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-275CWE-2751 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE39 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan