Security Vulnerabilities
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
CVSS Score
7.5
EPSS Score
0.005
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVSS Score
7.3
EPSS Score
0.003
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication.
CVSS Score
8.3
EPSS Score
0.004
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVSS Score
5.3
EPSS Score
0.004
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.
CVSS Score
5.3
EPSS Score
0.004
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
CVSS Score
5.4
EPSS Score
0.003
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
CVSS Score
8.2
EPSS Score
0.003
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management.
CVSS Score
4.4
EPSS Score
0.001
Published
2026-08-13
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
CVSS Score
5.3
EPSS Score
0.003
Published
2026-08-13
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.
CVSS Score
2.7
EPSS Score
0.003
Published
2026-08-13