Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.
IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-1820 | IBM WebSphere Portal 跨站脚本漏洞 — WebSphere Portal | 6.1 | - | 2018-09-27 |
| CVE-2018-1545 | IBM Spectrum Protect 安全漏洞 — Spectrum Protect | 7.5 | - | 2018-09-26 |
| CVE-2018-1550 | IBM Spectrum Protect 安全漏洞 — Spectrum Protect | 5.5 | - | 2018-09-26 |
| CVE-2018-1610 | IBM Rational Requirements Composer和Rational DOORS Next Generation 跨站脚本漏洞 — Rational DOORS Next Generation | 5.4 | - | 2018-09-26 |
| CVE-2018-1683 | IBM WebSphere Application Server Liberty 信息泄露漏洞 — WebSphere Application Server | 7.5 | - | 2018-09-26 |
| CVE-2018-1768 | IBM Spectrum Protect Plus 安全漏洞 — Spectrum Protect Plus | 7.1 | - | 2018-09-26 |
| CVE-2018-1785 | 多款IBM产品安全漏洞 — Spectrum Protect | 7.5 | - | 2018-09-26 |
| CVE-2018-1539 | IBM Rational Engineering Lifecycle Manager 安全漏洞 — Rational Engineering Lifecycle Manager | 6.5 | - | 2018-09-25 |
| CVE-2018-1560 | IBM Rational Engineering Lifecycle Manager 跨站脚本漏洞 — Rational Engineering Lifecycle Manager | 5.4 | - | 2018-09-25 |
| CVE-2018-1588 | IBM Jazz Foundation 安全漏洞 — Rational Engineering Lifecycle Manager | 7.1 | - | 2018-09-25 |
| CVE-2018-1607 | IBM Rational Engineering Lifecycle Manager 安全漏洞 — Rational Engineering Lifecycle Manager | 7.1 | - | 2018-09-25 |
| CVE-2018-1659 | IBM Rational Engineering Lifecycle Manager 跨站脚本漏洞 — Rational Engineering Lifecycle Manager | 5.4 | - | 2018-09-25 |
| CVE-2018-1664 | IBM DataPower Gateway 安全漏洞 — DataPower Gateway CD | 7.1 | - | 2018-09-25 |
| CVE-2018-1669 | IBM DataPower Gateway 安全漏洞 — DataPower Gateways | 7.1 | - | 2018-09-25 |
| CVE-2018-1710 | IBM DB2 缓冲区错误漏洞 — DB2 for Linux, UNIX and Windows | 7.8 | - | 2018-09-21 |
| CVE-2018-1711 | IBM DB2 权限许可和访问控制问题漏洞 — DB2 for Linux, UNIX and Windows | 7.8 | - | 2018-09-21 |
| CVE-2018-1674 | IBM Business Process Manager SQL注入漏洞 — Business Process Manager | 9.8 | - | 2018-09-20 |
| CVE-2018-1800 | IBM Sterling B2B Integrator 信息泄露漏洞 — Sterling B2B Integrator | 5.5 | - | 2018-09-20 |
| CVE-2017-1794 | IBM Tivoli Monitoring 安全漏洞 — Tivoli Monitoring | 7.5 | - | 2018-09-19 |
| CVE-2018-1782 | IBM GPFS 安全漏洞 — Spectrum Scale | 6.5 | - | 2018-09-19 |
| CVE-2018-1719 | IBM WebSphere Application Server 信息泄露漏洞 — WebSphere Application Server | 7.4 | - | 2018-09-14 |
| CVE-2018-1791 | IBM Connections 安全漏洞 — Connections | 4.9 | - | 2018-09-14 |
| CVE-2018-1698 | IBM Maximo Asset Management 安全漏洞 — Maximo Asset Management | 5.3 | - | 2018-09-13 |
| CVE-2018-1773 | IBM Datacap Fastdoc Capture 安全漏洞 — Datacap | 8.3 | - | 2018-09-12 |
| CVE-2018-1571 | IBM QRadar 操作系统命令注入漏洞 — QRadar SIEM | 8.8 | - | 2018-09-11 |
| CVE-2017-1679 | IBM OpenPages GRC Platform 信息泄露漏洞 — OpenPages GRC Platform | 3.3 | - | 2018-09-10 |
| CVE-2017-1114 | IBM Campaign 跨站脚本漏洞 — Campaign | 5.4 | - | 2018-09-07 |
| CVE-2017-1115 | IBM Campaign 安全漏洞 — Campaign | 5.4 | - | 2018-09-07 |
| CVE-2018-1567 | IBM WebSphere Application Server 代码问题漏洞 — WebSphere Application Server | 9.8 | - | 2018-09-07 |
| CVE-2018-1756 | IBM Security Identity Governance and Intelligence SQL注入漏洞 — Security Identity Governance and Intelligence | 7.5 | - | 2018-09-07 |
This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.