CVE-2022-40609: IBM SDK

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

IBM SDK, Java Technology Edition 7.1.5.18 and 8.0.8.0 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe deserialization flaw. By sending specially-crafted data, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 236069.

Affected products

• IBM SDK: before 7.1.5.19 (fixed in 7.1.5.19); from 8.0, before 8.0.8.5 (fixed in 8.0.8.5)

Published 2023-08-02. Last modified 2026-06-17.