Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-52366 IBM Concert Software information disclosure — Concert Software CWE-327 5.9 Medium 2025-01-07
CVE-2024-52891 IBM Concert Software log manipulation — Concert Software CWE-117 5.4 Medium 2025-01-07
CVE-2024-52367 IBM Concert Software information disclosure — Concert Software CWE-497 5.3 Medium 2025-01-07
CVE-2024-51472 IBM DevOps Deploy / IBM UrbanCode Deploy HTML injection — DevOps Deploy CWE-80 3.1 Low 2025-01-06
CVE-2024-31914 IBM Sterling B2B Integrator cross-site scripting — Sterling B2B Integrator Standard Edition CWE-79 6.4 Medium 2025-01-06
CVE-2024-31913 IBM Sterling B2B Integrator cross-site scripting — Sterling B2B Integrator Standard Edition CWE-79 5.5 Medium 2025-01-06
CVE-2024-41763 IBM Engineering Lifecycle Optimization - Publishing information disclosure — Engineering Lifecycle Optimization Publishing CWE-327 5.9 Medium 2025-01-04
CVE-2024-41766 IBM Engineering Lifecycle Optimization - Publishing denial of service — Engineering Lifecycle Optimization Publishing CWE-1333 7.5 High 2025-01-04
CVE-2024-41765 IBM Engineering Lifecycle Optimization - Publishing directory traversal — Engineering Lifecycle Optimization Publishing CWE-22 6.5 Medium 2025-01-04
CVE-2024-41767 IBM Engineering Lifecycle Optimization - Publishing SQL injection — Engineering Lifecycle Optimization Publishing CWE-89 7.3 High 2025-01-04
CVE-2024-41768 IBM Engineering Lifecycle Optimization - Publishing unhandled SLL exception — Engineering Lifecycle Optimization Publishing CWE-544 6.5 Medium 2025-01-04
CVE-2024-55897 IBM PowerHA SystemMirror for i information disclosure — i 4.3 Medium 2025-01-03
CVE-2024-55896 IBM PowerHA SystemMirror for i clickjacking — i CWE-451 5.4 Medium 2025-01-03
CVE-2024-41780 IBM Jazz Foundation information disclosure — Jazz Foundation CWE-359 4.2 Medium 2025-01-03
CVE-2024-5591 IBM Jazz Foundation information disclosure — Jazz Foundation CWE-209 4.3 Medium 2025-01-03
CVE-2024-54181 IBM WebSphere Automation command injection — WebSphere Automation CWE-78 7.2 High 2024-12-30
CVE-2024-52906 IBM AIX denial of service — AIX CWE-362 5.5 Medium 2024-12-25
CVE-2024-47102 IBM AIX denial of service — AIX CWE-863 5.5 Medium 2024-12-25
CVE-2024-39727 IBM Engineering Lifecycle Optimization - Engineering Insights tabnabbing — Engineering Insights CWE-1022 6.1 Medium 2024-12-25
CVE-2024-39725 IBM Engineering Lifecycle Optimization - Engineering Insights information disclosure — Engineering Insights CWE-209 5.3 Medium 2024-12-25
CVE-2024-51463 IBM i server-side request forgery — i CWE-918 5.4 Medium 2024-12-21
CVE-2024-51464 IBM i authentication bypass — i CWE-288 4.3 Medium 2024-12-21
CVE-2024-28767 IBM Security Directory Integrator command execution — Security Directory Integrator CWE-78 6.8 Medium 2024-12-20
CVE-2024-40695 IBM Cognos Analytics file upload — Cognos Analytics CWE-434 8.0 High 2024-12-20
CVE-2024-51466 IBM Cognos Analytics expression language injection — Cognos Analytics CWE-917 9.0 Critical 2024-12-20
CVE-2024-49336 IBM Security Guardium server-side request forgery — Security Guardium CWE-918 6.5 Medium 2024-12-19
CVE-2024-52897 IBM MQ information disclosure — MQ CWE-209 6.2 Medium 2024-12-19
CVE-2024-51471 IBM MQ Appliance denial of service — MQ Appliance CWE-125 5.3 Medium 2024-12-19
CVE-2024-52896 IBM MQ information disclosure — MQ CWE-209 6.2 Medium 2024-12-19
CVE-2024-35141 IBM Security Verify Access privilege escalation — Security Verify Access Docker CWE-250 7.8 High 2024-12-19

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.