Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-49784 IBM OpenPages with Watson information disclosure — OpenPages with Watson CWE-327 5.3 Medium 2025-07-08
CVE-2023-43039 IBM OpenPages with Watson cross-site scripting — OpenPages with Watson CWE-79 6.1 Medium 2025-07-08
CVE-2025-2827 IBM Sterling File Gateway information disclosure — Sterling File Gateway CWE-548 4.3 Medium 2025-07-08
CVE-2025-2793 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting — Sterling B2B Integrator CWE-79 5.4 Medium 2025-07-08
CVE-2025-3630 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting — Sterling B2B Integrator CWE-79 6.4 Medium 2025-07-08
CVE-2024-43190 IBM Engineering Requirements Management DOORS weak authentication — Engineering Requirements Management DOORS CWE-640 5.9 Medium 2025-07-07
CVE-2025-1351 IBM Storage Virtualize privilege escalation — Storage Virtualize CWE-362 6.7 Medium 2025-07-07
CVE-2025-36014 IBM Integration Bus for z/OS code injection — Integration Bus CWE-94 8.2 High 2025-07-07
CVE-2025-2141 IBM System Storage Virtualization Engine TS7700 cross-site scripting — System Storage Virtualization Engine TS7700 CWE-79 6.1 Medium 2025-07-01
CVE-2025-36056 IBM System Storage Virtualization Engine TS7700 cross-site scripting — System Storage Virtualization Engine TS7700 CWE-79 5.4 Medium 2025-07-01
CVE-2025-2895 IBM Cloud Pak System HTML injection — Cloud Pak System CWE-80 5.4 Medium 2025-06-30
CVE-2025-1991 IBM Informix Dynamic Server denial of service — Informix Dynamic Server CWE-191 7.5 High 2025-06-28
CVE-2024-52900 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.4 Medium 2025-06-28
CVE-2025-36027 IBM Datacap clickjacking — Datacap CWE-1021 5.4 Medium 2025-06-28
CVE-2025-36026 IBM Datacap information disclosure — Datacap CWE-614 4.3 Medium 2025-06-28
CVE-2024-39730 IBM Datacap clickjacking — Datacap CWE-451 5.4 Medium 2025-06-28
CVE-2023-38007 IBM Cloud Pak System HTML injection — Cloud Pak System CWE-80 5.4 Medium 2025-06-27
CVE-2025-36034 IBM InfoSphere DataStage Flow Designer information disclosure — InfoSphere Information Server CWE-319 5.3 Medium 2025-06-26
CVE-2025-36038 IBM WebSphere Application Server code execution — WebSphere Application Server CWE-502 9.0 Critical 2025-06-25
CVE-2025-0966 IBM InfoSphere Information Server SQL injection — InfoSphere Information Server CWE-89 7.6 High 2025-06-25
CVE-2025-36004 IBM i privilege escalation — i CWE-427 8.8 High 2025-06-25
CVE-2025-3629 IBM InfoSphere Information Server file manipulation — InfoSphere Information Server CWE-282 4.3 Medium 2025-06-21
CVE-2025-3221 IBM InfoSphere Information Server denial of service — InfoSphere Information Server CWE-770 7.5 High 2025-06-21
CVE-2025-36016 IBM Process Mining HTTP open redirect — Process Mining CWE-601 6.8 Medium 2025-06-21
CVE-2025-3319 IBM Spectrum Protect Server authentication bypass — Spectrum Protect Server CWE-306 8.1 High 2025-06-20
CVE-2025-33117 IBM QRadar SIEM command execution — QRadar SIEM CWE-73 9.1 Critical 2025-06-19
CVE-2025-33121 IBM QRadar SIEM XML external entity injection — QRadar SIEM CWE-611 7.1 High 2025-06-19
CVE-2025-36050 IBM QRadar SIEM information disclosure — QRadar SIEM CWE-532 6.2 Medium 2025-06-19
CVE-2025-1349 IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting — Sterling B2B Integrator CWE-79 5.5 Medium 2025-06-18
CVE-2025-1348 IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure — Sterling B2B Integrator CWE-525 4.0 Medium 2025-06-18

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.