IBM i CVE SQL - V7R5 TR8, V7R6 TR2 Minimum to Run

Oct 14, 2026 

 

Good day everyone. 

 

This IBM i CVE SQL was posted to LinkedIn by Leonardo Villalobos Prieto, IBM i Security Subject Matter Expert out of Santiago, Chile. Leonardo works for Grupo Clip.

 

I think you'll find it most helpful when researching IBM i CVE's (Common Vulnerability Exposures) on your IBM i. Your system very well could be required to be protected from the CVE's you'll find. 

 

This is reposted with his permission. Copy / paste into ACS Run SQL Scripts or

on the 5250 STRSQL screen. 

 

  =========================================================================
  -- Script: Query for Vulnerabilities Unique to Pure HTTP (IBM i)
  -- Range: Last 6 Months (Excluding WebSphere and Liberty)
 =========================================================================

SELECT
CVE_ID,
SCORE,
PUBLISH_DATE,
MODIFICATION_DATE,
PRODUCT_NAME,
TITLE,
IBM_SUPPORT_URL,
SUMMARY
FROM TABLE
(SYSTOOLS.CVE_INFO()) AS x

-- Filter by last 6 months
WHERE PUBLISH_DATE >= CURRENT DATE - 6 MONTHS

-- Filter only mentions to HTTP
AND(
UPPER(PRODUCT_NAME) LIKE  '%HTTP%'
OR UPPER(TITLE) LIKE '%HTTP%'
OR UPPER(SUMMARY) LIKE '%HTTP%'
)
-- Explicitly exclude any traces of WebSphere or Liberty
AND UPPER(PRODUCT_NAME) NOT LIKE '%WEBSHERE%'
AND UPPER(PRODUCT_NAME) NOT LIKE '%LIBERTY%'
AND UPPER(TITLE) NOT LIKE '%WEBSHERE%'
AND UPPER(TITLE) NOT LIKE '%LIBERTY%'

ORDER BY
-- Sort first by criticality and then by most recent date
CASE SCORE
WHEN 'Critical'    THEN 1
WHEN 'High'        THEN 2
WHEN 'Medium'   THEN 3
WHEN 'Low'         THEN 4
ELSE 5
END,
PUBLISH_DATE ASC;

 

 =========================================================================

 

The results will look something like this - Remember, V7R5, TR8 or V7R6 TR2 minimum OS / TR level needed to run. The SQL returns data about vulnerabilities for HTTP. 

 

 

Click to open the results picture.