Approved changes feed: RSS · Atom

cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*

part: o version: 7.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductI (e242ba23-d556-5308-b830-744d62f35416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2311 vulnerable 2026-06-08 07:55:16.863577 IBM i is affected by a privilege escalation vulnerability in Web Administration GUI []
MEDIUM (6.4)
IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.  A malicious actor could cause user-controlled code to run with administrator privilege.
Published: 2026-04-30T21:45:08.343Z
Updated: 2026-05-02T03:55:31.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-36119 vulnerable 2026-06-08 07:21:01.041167 IBM i authentication bypass
HIGH (7.1)
IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i (DCM) due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions in DCM as an administrator.
Published: 2025-08-08T14:25:40.141Z
Updated: 2026-02-26T17:49:46.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33109 vulnerable 2026-06-08 07:19:01.767346 IBM i privilege escalation
HIGH (7.5)
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 is vulnerable to a privilege escalation caused by an invalid database authority check. A bad actor could execute a database procedure or function without having all required permissions, in addition to causing denial of service for some database actions.
Published: 2025-07-24T15:06:49.888Z
Updated: 2026-02-26T17:50:15.484Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33103 vulnerable 2026-06-08 07:19:01.755860 IBM i privilege escalation
HIGH (8.5)
IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 product IBM TCP/IP Connectivity Utilities for i contains a privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system.
Published: 2025-05-17T16:02:29.639Z
Updated: 2026-02-26T18:28:06.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31878 vulnerable 2026-06-08 06:35:32.217021 IBM i information disclosure
MEDIUM (5.3)
IBM i 7.2, 7.3, 7.4, and 7.5 Service Tools Server (SST) is vulnerable to SST user enumeration by a remote attacker. This vulnerability can be used by a malicious actor to gather information about SST users that can be targeted in further attacks. IBM X-Force ID: 287538.
Published: 2024-06-07T13:21:52.509Z
Updated: 2024-08-02T01:59:50.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27264 vulnerable 2026-06-08 06:31:28.361771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25050 vulnerable 2026-06-08 06:31:21.851487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22346 vulnerable 2026-06-08 06:29:34.614447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43064 vulnerable 2026-06-08 06:11:09.865636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40686 vulnerable 2026-06-08 06:11:04.234087 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40685 vulnerable 2026-06-08 06:11:04.231566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40378 vulnerable 2026-06-08 06:09:42.204176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40377 vulnerable 2026-06-08 06:09:42.203557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-40375 vulnerable 2026-06-08 06:09:42.199224 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38721 vulnerable 2026-06-08 06:08:18.711067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23470 vulnerable 2026-06-08 05:56:02.731757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43860 vulnerable 2026-06-08 05:49:34.883057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43859 vulnerable 2026-06-08 05:49:34.882708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43858 vulnerable 2026-06-08 05:49:34.882252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-43857 vulnerable 2026-06-08 05:49:34.879907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34358 vulnerable 2026-06-08 05:44:52.697734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22495 vulnerable 2026-06-08 05:40:53.863102 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22481 vulnerable 2026-06-08 05:40:53.800748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-39056 vulnerable 2026-06-08 05:33:48.834193 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38876 vulnerable 2026-06-08 05:33:48.468069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20501 vulnerable 2026-06-08 05:29:09.363932 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4345 vulnerable 2026-06-08 05:25:59.212031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4450 vulnerable 2026-06-08 05:13:57.207035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4381 vulnerable 2026-06-08 05:13:57.105735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4040 vulnerable 2026-06-08 05:13:56.698251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1460 vulnerable 2026-06-08 05:09:22.224949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.