Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-49827 IBM Concert Software information disclosure — Concert Software CWE-213 3.7 Low 2025-08-18
CVE-2025-36120 IBM Storage Virtualize privilege escalation — Storage Virtualize CWE-863 8.8 High 2025-08-18
CVE-2025-36088 IBM TS4500 cross-site scripting — Storage TS4500 Library CWE-79 5.4 Medium 2025-08-15
CVE-2025-33142 IBM WebSphere Application Server information disclosure — WebSphere Application Server CWE-295 5.3 Medium 2025-08-14
CVE-2025-36047 IBM WebSphere Application Server Liberty denial of service — WebSphere Application Server Liberty CWE-770 5.3 Medium 2025-08-14
CVE-2025-36000 IBM WebSphere Application Server Liberty cross-site scripting — WebSphere Application Server Liberty CWE-79 4.4 Medium 2025-08-12
CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security — WebSphere Application Server Liberty CWE-268 5.9 Medium 2025-08-12
CVE-2025-36023 IBM Cloud Pak for Business Automation security bypass — Cloud Pak for Business Automation CWE-639 6.5 Medium 2025-08-08
CVE-2025-36119 IBM i authentication bypass — i CWE-290 7.1 High 2025-08-08
CVE-2024-56339 IBM WebSphere Application Server information disclosure — WebSphere Application Server CWE-650 3.7 Low 2025-08-07
CVE-2025-36020 IBM Guardium Data Protection information disclosure — Guardium Data Protection CWE-319 5.9 Medium 2025-08-06
CVE-2025-3354 IBM Tivoli Monitoring code execution — Tivoli Monitoring CWE-122 8.1 High 2025-08-06
CVE-2025-3320 IBM Tivoli Monitoring code execution — Tivoli Monitoring CWE-122 8.1 High 2025-08-06
CVE-2024-52890 IBM Engineering Lifecycle Optimization - Publishing cross-site scripting — IBM Engineering Lifecycle Optimization - Publishing CWE-84 6.1 Medium 2025-08-05
CVE-2025-2824 IBM Operational Decision Manager HTTP open redirect — Operational Decision Manager CWE-601 7.4 High 2025-08-01
CVE-2025-33118 IBM QRadar SIEM cross-site scripting — QRadar SIEM CWE-79 6.4 Medium 2025-08-01
CVE-2025-36040 IBM Aspera Faspex session fixation — Aspera Faspex CWE-613 6.5 Medium 2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security — Aspera Faspex CWE-602 6.5 Medium 2025-07-30
CVE-2024-49828 IBM Db2 for Linux, UNIX and Windows denial of service — Db2 CWE-121 6.5 Medium 2025-07-29
CVE-2024-51473 IBM Db2 for Linux, UNIX and Windows denial of service — Db2 CWE-121 6.5 Medium 2025-07-29
CVE-2024-52894 IBM Db2 for Linux, UNIX and Windows denial of service — Db2 CWE-121 4.9 Medium 2025-07-29
CVE-2025-33114 IBM Db2 for Linux denial of service — Db2 CWE-943 5.3 Medium 2025-07-29
CVE-2025-33092 IBM Db2 for Linux code execution — Db2 CWE-121 7.8 High 2025-07-29
CVE-2025-36071 IBM Db2 denial of service — IBM Db2 CWE-772 6.5 Medium 2025-07-29
CVE-2025-36010 IBM Db2 for Linux denial of service — Db2 CWE-833 6.5 Medium 2025-07-29
CVE-2025-2533 IBM Db2 for Linux denial of service — Db2 CWE-789 5.3 Medium 2025-07-29
CVE-2024-49343 IBM Informix Dynamic Server HTML injection — Informix Dynamic Server CWE-80 5.4 Medium 2025-07-28
CVE-2024-49342 IBM Informix Dynamic Server information disclosure — Informix Dynamic Server CWE-307 7.5 High 2025-07-28
CVE-2025-33109 IBM i privilege escalation — i CWE-250 7.5 High 2025-07-24
CVE-2025-33013 IBM MQ Operator information disclosure — MQ Operator CWE-244 6.2 Medium 2025-07-24

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.