Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:i:7.4.0:*:*:*:*:*:*:*

part: a version: 7.4.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductI (e242ba23-d556-5308-b830-744d62f35416)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-9072 vulnerable 2026-07-29 01:09:06.633051 WebSphere Application Server Remote Code Execution
HIGH (8.1)
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using Intelligent Management with the WebSphere WebServer Plug-in component - are vulnerable to remote code execution and denial of service. This vulnerability can be exploited when an attacker impersonates backend servers and sends crafted responses to the plug-in.
Published: 2026-06-22T14:21:35.024Z
Updated: 2026-07-09T19:54:37.565Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8858 vulnerable 2026-07-29 01:09:06.344819 WebSphere Application Server Remote Code Execution
HIGH (7.5)
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to remote code execution and denial of service in the WebSphere Web Server Plug-in component. This vulnerability can be exploited when an attacker impersonates the application server and sends crafted responses to the plug-in.
Published: 2026-06-22T14:16:39.629Z
Updated: 2026-07-09T19:54:33.016Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-7870 vulnerable 2026-07-29 01:09:05.307540 IBM i is Affected by Privilege Escalation []
HIGH (8.8)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privilege.
Published: 2026-06-11T14:34:34.482Z
Updated: 2026-06-12T03:55:35.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4942 vulnerable 2026-07-29 00:57:47.384262 IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
MEDIUM (5.9)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security (TLS) protocol to a version disabled in the server configuration.
Published: 2026-07-17T19:32:02.440Z
Updated: 2026-07-20T13:52:49.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-10852 vulnerable 2026-07-29 00:23:30.727361 Websphere Application Server is Affected By a Denial of Service
MEDIUM (5.9)
IBM WebSphere Application Server and IBM WebSphere Application Server Liberty are vulnerable to denial of service in the WebSphere WebServer Plug-in component when an attacker can pass crafted requests to the web server.
Published: 2026-06-22T19:32:28.668Z
Updated: 2026-07-09T19:54:28.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2311 vulnerable 2026-06-08 07:55:16.859832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.