IBM Personal Communications vulnerabilities

4 CVEs affecting IBM Personal Communications, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-1095, published 2025-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-0201, published 2012-03-02. High severity, CVSS 9.3. EPSS: 36.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in pcspref.dll in pcsws.exe in IBM Personal Communications 5.9.x before 5.9.8 and 6.0.x before 6.0.4 might allow remote attackers to execute arbitrary code via a long…
CVE-2024-25029, published 2024-04-06. Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Personal Communications 14.0.6 through 15.0.1 includes a Windows service that is vulnerable to remote code execution (RCE) and local privilege escalation (LPE). The vulnerability allows any…
CVE-2016-0321, published 2016-07-17. Medium severity, CVSS 6.2. EPSS: 0.4% chance of exploitation in the next 30 days. IBM Personal Communications (aka PCOMM) 6.x before 6.0.17 and 12.x before 12.0.0.1 does not properly restrict credential extraction, which allows local users to discover passwords by leveraging…
CVE-2025-1095, published 2025-04-08. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Personal Communications v14 and v15 include a Windows service that is vulnerable to local privilege escalation (LPE). The vulnerability allows any interactively logged in users on the target…