IBM
CVEs currently on EVULNABLE's Priority Feed for IBM, and this vendor's own CISA KEV history.
CISA KEV additions over time
Weekly additions to the KEV catalog, last 26 weeks. Ransomware-linked additions are the base of each bar. Ransomware-linked as currently marked by CISA; recent weeks can rise as CISA updates entries.
20 Apr – 12 Oct; busiest week: 1 added.
- Not ransomware-linked
- Ransomware-linked
- This week (so far)
| Week of | Added to KEV | Ransomware-linked |
|---|---|---|
| 2026-04-20 | 0 | 0 |
| 2026-04-27 | 0 | 0 |
| 2026-05-04 | 0 | 0 |
| 2026-05-11 | 0 | 0 |
| 2026-05-18 | 0 | 0 |
| 2026-05-25 | 0 | 0 |
| 2026-06-01 | 0 | 0 |
| 2026-06-08 | 0 | 0 |
| 2026-06-15 | 0 | 0 |
| 2026-06-22 | 0 | 0 |
| 2026-06-29 | 0 | 0 |
| 2026-07-06 | 0 | 0 |
| 2026-07-13 | 0 | 0 |
| 2026-07-20 | 0 | 0 |
| 2026-07-27 | 0 | 0 |
| 2026-08-03 | 1 | 0 |
| 2026-08-10 | 0 | 0 |
| 2026-08-17 | 0 | 0 |
| 2026-08-24 | 0 | 0 |
| 2026-08-31 | 0 | 0 |
| 2026-09-07 | 0 | 0 |
| 2026-09-14 | 0 | 0 |
| 2026-09-21 | 0 | 0 |
| 2026-09-28 | 0 | 0 |
| 2026-10-05 | 0 | 0 |
| 2026-10-12 (so far) | 0 | 0 |
In EVULNABLE's ranked feed
Showing all 8 IBM CVEs in EVULNABLE's ranked feed.
#1 94 Immediate CVE-2022-47986 ExigentKEV since 2023 · listed over a yearRansomwareCISA KEV IBM — IBM Aspera Faspex Code Execution Vulnerability KEV + ransomware, EPSS 99.9%
EVRS 94/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 86 Immediate CVE-2015-7450 ExigentKEV since 2022 · listed over a yearCISA KEV IBM — IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. KEV, EPSS 97.8%
EVRS 86/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.978.
#3 83 Urgent CVE-2019-4716 KEV since 2021 · listed over a yearCISA KEV IBM — IBM Planning Analytics Remote Code Execution Vulnerability KEV, EPSS 86.4%
EVRS 83/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.864.
#4 79 Urgent CVE-2020-4427 KEV since 2021 · listed over a yearCISA KEV IBM — IBM Data Risk Manager Security Bypass Vulnerability KEV, EPSS 70.0%
EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.700.
#5 76 Urgent CVE-2020-4428 KEV since 2021 · listed over a yearCISA KEV IBM — IBM Data Risk Manager Remote Code Execution Vulnerability KEV, EPSS 61.7%
EVRS 76/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.617.
#6 75 Urgent CVE-2020-4430 KEV since 2021 · listed over a yearCISA KEV IBM — IBM Data Risk Manager Directory Traversal Vulnerability KEV, EPSS 68.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.685.
#7 75 Urgent CVE-2026-9198 CISA federal deadline · Overdue by 2 monthsCISA KEV IBM — IBM Langflow Code Injection Vulnerability KEV, EPSS 28.7%, added to KEV within the last 90 days
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.287.
#8 75 Urgent CVE-2013-3993 KEV since 2022 · listed over a yearRansomwareCISA KEV IBM — IBM InfoSphere BigInsights Invalid Input Vulnerability KEV + ransomware, EPSS 4.8%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.