Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 5248

Browse all 5248 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Top products by IBM: AIX DB2 for Linux, UNIX and Windows i WebSphere Application Server InfoSphere Information Server Sterling B2B Integrator Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Langflow OSS Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager Spectrum Protect Plus Robotic Process Automation Spectrum Scale Cognos Controller UrbanCode Deploy DB2 Aspera Faspex Sterling File Gateway Security Verify Access Security Identity Governance and Intelligence Rational DOORS Next Generation Concert Cloud Pak System Cloud Pak for Security
CVE ID Title CVSS Severity Published
CVE-2021-29702 IBM DB2 注入漏洞 — DB2 for Linux- UNIX and Windows 7.5 - 2021-06-16
CVE-2021-20567 IBM Resilient 安全漏洞 — Resilient SOAR 4.4 - 2021-06-16
CVE-2021-20566 IBM Resilient 加密问题漏洞 — Resilient SOAR 7.5 - 2021-06-16
CVE-2021-20488 IBM Security Identity Manager 安全漏洞 — Security Identity Manager 6.5 - 2021-06-16
CVE-2021-20483 IBM Security Identity Manager 代码问题漏洞 — Security Identity Manager 6.5 - 2021-06-16
CVE-2020-5000 IBM Financial Transaction Manager 跨站脚本漏洞 — Financial Transaction Manager 5.4 Medium 2021-06-15
CVE-2021-20396 IBM QRadar SIEM 安全漏洞 — QRadar Analyst Workflow 3.3 - 2021-06-11
CVE-2021-29754 IBM WebSphere Application Server 安全漏洞 — WebSphere Application Server 9.8 - 2021-06-11
CVE-2020-5003 IBM Financial Transaction Manager 代码问题漏洞 — Financial Transaction Manager 8.2 - 2021-06-11
CVE-2020-5008 IBM DataPower Gateway 安全漏洞 — DataPower Gateway 5.3 - 2021-06-07
CVE-2021-20517 IBM WebSphere Application Server和WebSphere Application 路径遍历漏洞 — WebSphere Application Server ND 8.8 - 2021-06-07
CVE-2021-20380 IBM QRadar SIEM信息泄露漏洞 — Qradar Advisor 7.5 - 2021-06-03
CVE-2021-29670 IBM Engineering Lifecycle Optimization 跨站脚本漏洞 — Engineering Test Management 5.4 - 2021-06-02
CVE-2021-29668 IBM Engineering Lifecycle Optimization 跨站脚本漏洞 — Engineering Test Management 5.4 - 2021-06-02
CVE-2021-20371 IBM Jazz Foundation 配置错误漏洞 — Rational Collaborative Lifecycle Management 4.3 - 2021-06-02
CVE-2021-20347 IBM Jazz Foundation 代码问题漏洞 — Rational DOORS Next Generation 5.4 - 2021-06-02
CVE-2021-20348 IBM Jazz Foundation 代码问题漏洞 — Rational Rhapsody Model Manager 5.4 - 2021-06-02
CVE-2021-20346 IBM Jazz Foundation 代码问题漏洞 — Rational Collaborative Lifecycle Management 5.4 - 2021-06-02
CVE-2021-20343 IBM Jazz Foundation 代码问题漏洞 — Engineering Test Management 5.4 - 2021-06-02
CVE-2021-20345 IBM Jazz Foundation 代码问题漏洞 — Rational Rhapsody Model Manager 5.4 - 2021-06-02
CVE-2021-20338 IBM Engineering Test Management 跨站脚本漏洞 — Engineering Test Management 5.4 - 2021-06-02
CVE-2020-5030 IBM Engineering Test Management 跨站脚本漏洞 — Rational Rhapsody Model Manager 5.4 - 2021-06-02
CVE-2020-4732 多款IBM产品信息泄露漏洞 — Rational DOORS Next Generation 6.5 - 2021-06-02
CVE-2020-4977 IBM Engineering Lifecycle Optimization 跨站脚本漏洞 — Rational Quality Manager 5.4 - 2021-06-02
CVE-2020-4495 IBM Jazz Foundation 安全漏洞 — Engineering Test Management 8.8 - 2021-06-02
CVE-2021-29740 IBM Spectrum Scale 格式化字符串错误漏洞 — Spectrum Scale 7.8 - 2021-06-01
CVE-2020-4561 IBM Cognos Analytics 授权问题漏洞 — Cognos Analytics 9.1 - 2021-05-31
CVE-2020-4520 IBM Cognos Analytics 跨站脚本漏洞 — Cognos Analytics 9.6 - 2021-05-31
CVE-2020-4300 IBM Cognos Analytics 代码问题漏洞 — Cognos Analytics 8.2 - 2021-05-31
CVE-2020-4354 IBM Cognos Analytics 跨站脚本漏洞 — Cognos Analytics 5.4 - 2021-05-31

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.