← Back to vendor leaderboard
International Business Machines Corporation (IBM)
Vendor
Primary Scores
Original
78
Score breakdown
EXPLAINABILITY (x1)
37
EXPLOITABILITY (x3)
100
REMEDIABILITY (x3)
95
SEVERITY (x2)
39
Good
What these primary scores mean
Original?
Uses the scoring scheme devised during Phase I of the NCT SBIR.
Sub-Scores
Default Credentials
99

Score: 99.1769547325103 18711 product(s) evaluated. 154 instance(s) of default credentials found.

Explainability
37

The average Flesch-Kincaid readability score for the descriptions included with the 9117 CVE(s) associated with this vendor is 37.03736228302823. This means these descriptions are difficult to read.

Exploitability
100

This vendor has 8 KEV(s) out of 9117 CVEs(s).

MFA
73

MFA support was confirmed at https://www.ibm.com/trust/security with 73% classifier confidence.

Physical Tamper
89

48 of the 9117 CVE(s) associated with this vendor involve physical access (CVSS attack vector PHYSICAL or a physical-tamper CWE).

Remediability
95

Of the 9117 CVE(s) associated with this vendor, 8658 CVE(s) include(s) a tag indicating the CVE is remediable.

Severity
39

The average CVSS score of the 9117 CVE(s) associated with this vendor is 39.11955687177502.

What these sub-scores mean
Default Credentials?
Based solely on evidence of default credentials and whether users must change them.
Explainability?
Based solely on how clearly vulnerability disclosures are written.
Exploitability?
Based solely on how often known vulnerabilities have been actively exploited.
MFA?
Based solely on evidence of multi-factor authentication in the vendor's products.
Physical Tamper?
Based solely on the proportion of known vulnerabilities involving physical access.
Remediability?
Based solely on how readily vulnerabilities can be patched or mitigated.
Severity?
Based solely on the average severity of known vulnerabilities.