Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:i:7.2:*:*:*:*:*:*:*

part: a version: 7.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductI (e242ba23-d556-5308-b830-744d62f35416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3218 vulnerable 2026-06-08 07:23:08.472661 IBM i improper certificate validation
MEDIUM (5.4)
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to authentication and authorization attacks due to incorrect validation processing in IBM i Netserver. A malicious actor could use the weaknesses, in conjunction with brute force authentication attacks or to bypass authority restrictions, to access the server.
Published: 2025-05-07T01:10:57.713Z
Updated: 2025-09-01T00:35:12.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36371 vulnerable 2026-06-08 07:21:01.658280 IBM i Information Disclosure
MEDIUM (6.5)
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 are impacted by obtaining an information vulnerability in the database plan cache implementation.  A user with access to the database plan cache could see information they do not have authority to view.
Published: 2025-11-19T19:45:31.840Z
Updated: 2025-11-19T20:18:56.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36367 vulnerable 2026-06-08 07:21:01.641661 IBM i is affected by a privilege escalation in IBM i SQL services
HIGH (8.8)
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious actor can use the elevated privileges of another user profile to gain root access to the host operating system.
Published: 2025-11-01T12:01:31.137Z
Updated: 2026-02-26T17:47:40.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36004 vulnerable 2026-06-08 07:21:00.287823 IBM i privilege escalation
HIGH (8.8)
IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A malicious actor could cause user-controlled code to run with administrator privilege.
Published: 2025-06-25T02:32:40.332Z
Updated: 2026-02-26T17:50:25.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33122 vulnerable 2026-06-08 07:19:01.809733 IBM i privilege escalation
HIGH (7.5)
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A malicious actor could cause user-controlled code to run with administrator privilege.
Published: 2025-06-17T17:13:00.835Z
Updated: 2025-08-24T11:51:42.054Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33109 vulnerable 2026-06-08 07:19:01.766919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33103 vulnerable 2026-06-08 07:19:01.750587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-55898 vulnerable 2026-06-08 06:54:17.229995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38330 vulnerable 2026-06-08 06:41:45.087306 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-35122 vulnerable 2026-06-08 06:37:35.234778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31879 vulnerable 2026-06-08 06:35:32.219627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31878 vulnerable 2026-06-08 06:35:32.209677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31870 vulnerable 2026-06-08 06:35:32.201001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27275 vulnerable 2026-06-08 06:31:28.397020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27264 vulnerable 2026-06-08 06:31:28.361626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25050 vulnerable 2026-06-08 06:31:21.833677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22346 vulnerable 2026-06-08 06:29:34.619774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42006 vulnerable 2026-06-08 06:11:07.668603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30990 vulnerable 2026-06-08 06:04:41.592479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30989 vulnerable 2026-06-08 06:04:41.591732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30988 vulnerable 2026-06-08 06:04:41.588888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.