Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Top products by IBM: AIX DB2 for Linux, UNIX and Windows i WebSphere Application Server InfoSphere Information Server Sterling B2B Integrator Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Langflow OSS Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager Spectrum Protect Plus Spectrum Scale Robotic Process Automation UrbanCode Deploy Cognos Controller DB2 Aspera Faspex Sterling File Gateway Security Verify Access Rational DOORS Next Generation Security Identity Governance and Intelligence Cloud Pak System Cloud Pak for Security Concert
CVE ID Title CVSS Severity Published
CVE-2026-16982 IBM i is Affected By Multiple Vulnerabilities in Host Servers — i CWE-787 7.5 High 2026-08-13
CVE-2026-17220 IBM i is Affected By Multiple Vulnerabilities in Host Servers — i CWE-120 8.2 High 2026-08-13
CVE-2026-17197 IBM i is Affected By Multiple Vulnerabilities in Host Servers — i CWE-287 8.1 High 2026-08-13
CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server [] — i CWE-269 7.8 High 2026-08-13
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser — Db2 CWE-121 8.4 High 2026-08-12
CVE-2026-17485 IBM i is Affected By Denial of Service Vulnerability [] — i CWE-125 8.2 High 2026-08-12
CVE-2024-27253 IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request — DOORS Next CWE-287 10.0 Critical 2026-08-12
CVE-2026-7366 IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall — DataPower Gateway 11.0.0 CWE-362 4.2 Medium 2026-08-12
CVE-2026-13476 IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution — Informix Dynamic Server CWE-78 7.3 High 2026-08-12
CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility — Informix Dynamic Server CWE-284 7.8 High 2026-08-12
CVE-2026-10543 IBM® Db2® is vulnerable to privilege escalation with a specially crafted query — Db2 CWE-285 8.2 High 2026-08-12
CVE-2026-16480 IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data. — Db2 CWE-602 4.3 Medium 2026-08-12
CVE-2026-18097 IBM® Db2® federated server could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files. — Db2 CWE-532 5.5 Medium 2026-08-12
CVE-2026-18096 IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak — Db2 CWE-770 3.3 Low 2026-08-12
CVE-2026-13094 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities — i Access Client Solutions CWE-94 7.8 High 2026-08-12
CVE-2026-13433 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities — i Access Client Solutions CWE-494 8.3 High 2026-08-12
CVE-2026-13105 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities — i Access Client Solutions CWE-22 8.8 High 2026-08-12
CVE-2026-16695 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities — i Access Client Solutions CWE-78 7.8 High 2026-08-12
CVE-2026-14866 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities — i Access Client Solutions CWE-798 7.7 High 2026-08-12
CVE-2026-11932 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-835 5.3 Medium 2026-08-12
CVE-2026-17616 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-310 6.8 Medium 2026-08-12
CVE-2026-12359 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-287 8.1 High 2026-08-12
CVE-2026-11923 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-287 7.4 High 2026-08-12
CVE-2026-12004 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-134 8.7 High 2026-08-12
CVE-2026-13267 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-302 8.1 High 2026-08-12
CVE-2026-11937 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-416 3.1 Low 2026-08-12
CVE-2026-12618 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-74 7.2 High 2026-08-12
CVE-2026-12005 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Security Verify Access CWE-78 7.2 High 2026-08-12
CVE-2026-13361 IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution — Informix Dynamic Server CWE-121 8.8 High 2026-08-12
CVE-2026-17642 IBM i is Affected By Remote Code Execution Vulnerabilities [, ] — i CWE-78 8.8 High 2026-08-12

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.