IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Top products by IBM: AIX DB2 for Linux, UNIX and Windows i WebSphere Application Server InfoSphere Information Server Sterling B2B Integrator Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Langflow OSS Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager Spectrum Protect Plus Spectrum Scale Robotic Process Automation UrbanCode Deploy Cognos Controller DB2 Aspera Faspex Sterling File Gateway Security Verify Access Rational DOORS Next Generation Security Identity Governance and Intelligence Cloud Pak System Cloud Pak for Security Concert

CVE ID	Title	CVSS	Severity	Published
CVE-2018-1803	IBM Security Access Manager 输入验证错误漏洞 — Security Access Manager Appliance	5.4	-	2018-12-13
CVE-2018-1804	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	5.9	-	2018-12-13
CVE-2018-1805	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	4.3	-	2018-12-13
CVE-2018-1813	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	6.5	-	2018-12-13
CVE-2018-1814	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	7.5	-	2018-12-13
CVE-2018-1815	IBM Security Access Manager Appliance for Enterprise Single-Sign On 跨站脚本漏洞 — Security Access Manager Appliance	6.1	-	2018-12-13
CVE-2018-1817	IBM Security Guardium 跨站脚本漏洞 — Security Guardium	6.1	-	2018-12-13
CVE-2018-1818	IBM Security Guardium 安全漏洞 — Security Guardium	9.8	-	2018-12-13
CVE-2018-1821	IBM Operational Decision Manager 安全漏洞 — Operational Decision Management	8.2	-	2018-12-13
CVE-2018-1886	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	5.3	-	2018-12-13
CVE-2018-1887	IBM Security Access Manager 安全漏洞 — Security Access Manager Appliance	7.7	-	2018-12-13
CVE-2018-1474	IBM BigFix Platform 注入漏洞 — BigFix Platform	4.7	-	2018-12-12
CVE-2018-1476	IBM BigFix Platform 安全漏洞 — BigFix Platform	5.3	-	2018-12-12
CVE-2018-1478	IBM BigFix Platform 安全漏洞 — BigFix Platform	5.4	-	2018-12-12
CVE-2018-1480	IBM BigFix Platform 安全漏洞 — BigFix Platform	5.3	-	2018-12-12
CVE-2018-1481	IBM BigFix Platform 安全漏洞 — BigFix Platform	5.3	-	2018-12-12
CVE-2018-1484	IBM BigFix Platform 安全漏洞 — BigFix Platform	4.3	-	2018-12-12
CVE-2018-1485	IBM BigFix Platform 安全漏洞 — BigFix Platform	3.3	-	2018-12-12
CVE-2018-1901	IBM WebSphere Application Server 权限许可和访问控制问题漏洞 — WebSphere Application Server	9.8	-	2018-12-12
CVE-2018-1926	IBM WebSphere Application Server 跨站请求伪造漏洞 — WebSphere Application Server	8.8	-	2018-12-12
CVE-2018-1652	IBM DataPower Gateway和MQ Appliance 安全漏洞 — DataPower Gateways	8.1	-	2018-12-11
CVE-2018-1654	IBM Curam Social Program Management 安全漏洞 — Curam Social Program Management	6.1	-	2018-12-11
CVE-2018-1900	IBM Cúram Social Program Management 跨站脚本漏洞 — Curam Social Program Management	5.4	-	2018-12-11
CVE-2018-1904	IBM WebSphere Application Server 代码问题漏洞 — WebSphere Application Server	9.8	-	2018-12-11
CVE-2018-1957	IBM WebSphere Application Server 信息泄露漏洞 — WebSphere Application Server	7.5	-	2018-12-10
CVE-2018-1424	IBM Marketing Platform 安全漏洞 — Marketing Platform	7.1	-	2018-12-07
CVE-2018-1663	IBM DataPower Gateways 安全漏洞 — DataPower Gateways	5.9	-	2018-12-07
CVE-2018-1883	IBM MQ Console REST API 安全漏洞 — MQ	7.5	-	2018-12-07
CVE-2018-1896	IBM Connections 安全漏洞 — Connections	5.4	-	2018-12-07
CVE-2018-1920	IBM Marketing Platform 安全漏洞 — Marketing Platform	7.1	-	2018-12-07

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.