Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-43196 IBM OpenPages data manipulation — OpenPages with Watson CWE-296 4.3 Medium 2025-02-20
CVE-2024-49355 IBM OpenPages log manipulation — OpenPages with Watson CWE-117 5.3 Medium 2025-02-20
CVE-2023-47160 IBM Cognos Controller XML external entity injection — Cognos Controller CWE-611 8.2 High 2025-02-19
CVE-2024-28777 IBM Cognos Controller code execution — Cognos Controller CWE-502 8.8 High 2025-02-19
CVE-2024-28776 IBM Cognos Controller cross-site scripting — Cognos Controller CWE-79 5.4 Medium 2025-02-19
CVE-2024-28780 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2025-02-19
CVE-2024-45081 IBM Cognos Controller incorrect authorization — Cognos Controller CWE-863 6.5 Medium 2025-02-19
CVE-2024-45084 IBM Cognos Controller CSV injection — Cognos Controller CWE-1236 8.0 High 2025-02-19
CVE-2024-52902 IBM Cognos Controller information disclosure — Cognos Controller CWE-798 8.8 High 2025-02-19
CVE-2024-56463 IBM QRadar SIEM cross-site scripting — QRadar SIEM CWE-79 4.8 Medium 2025-02-14
CVE-2024-56477 IBM Power Hardware Management Console directory traversal — Power Hardware Management Console CWE-22 6.5 Medium 2025-02-14
CVE-2024-52895 IBM i denial of service — i CWE-754 6.5 Medium 2025-02-14
CVE-2024-55904 IBM DevOps Deploy / IBM UrbanCode Deploy command injection — UrbanCode Deploy CWE-78 7.2 High 2025-02-14
CVE-2024-54176 IBM UrbanCode Deploy missing authentication — UrbanCode Deploy CWE-306 4.3 Medium 2025-02-08
CVE-2025-0158 IBM EntireX denial of service — EntireX CWE-248 5.5 Medium 2025-02-06
CVE-2024-56467 IBM EntireX information disclosure — EntireX CWE-209 3.3 Low 2025-02-06
CVE-2024-54171 IBM EntireX XML external entity injection — EntireX CWE-611 7.1 High 2025-02-06
CVE-2024-52892 IBM Jazz for Service Management Cross-Site Scripting — Jazz for Service Management CWE-79 6.1 Medium 2025-02-06
CVE-2025-0799 IBM App Connect Enterprise Arbitrary File Write — IBM App Connect Enterprise CWE-22 6.5 Medium 2025-02-06
CVE-2024-51450 IBM Security Verify Directory Command Execution — Security Verify Directory CWE-78 9.1 Critical 2025-02-06
CVE-2024-49814 IBM Security Verify Access Appliance Privilege Escalation — Security Verify Access Appliance CWE-250 7.8 High 2025-02-06
CVE-2024-49800 IBM ApplinX Information Disclosure — ApplinX CWE-316 4.3 Medium 2025-02-05
CVE-2024-49798 IBM ApplinX Information Disclosure — ApplinX CWE-209 4.3 Medium 2025-02-05
CVE-2024-49797 IBM ApplinX Information Disclosure — ApplinX CWE-327 5.9 Medium 2025-02-05
CVE-2024-49796 IBM ApplinX Clickjacking — ApplinX CWE-1021 5.4 Medium 2025-02-05
CVE-2024-49795 IBM ApplinX Cross-Site Request Forgery — ApplinX CWE-352 4.3 Medium 2025-02-05
CVE-2024-49794 IBM ApplinX Cross-Site Request Forgery — ApplinX CWE-352 4.3 Medium 2025-02-05
CVE-2024-49793 IBM ApplinX Cross-Site Scripting — ApplinX CWE-79 5.4 Medium 2025-02-05
CVE-2024-49792 IBM ApplinX Cross-Site Scripting — ApplinX CWE-79 5.4 Medium 2025-02-05
CVE-2024-49791 IBM ApplinX Cross-Site Scripting — ApplinX CWE-79 6.4 Medium 2025-02-05

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.