Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-37529 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows CWE-789 6.5 Medium 2024-08-14
CVE-2024-35152 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows CWE-789 6.5 Medium 2024-08-14
CVE-2024-35136 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows CWE-943 5.3 Medium 2024-08-14
CVE-2023-50314 IBM WebSphere Application Server Libery information disclosure — WebSphere Application Liberty CWE-295 5.3 Medium 2024-08-14
CVE-2023-50315 IBM WebSphere Application Server information disclosure — WebSphere Application Server CWE-295 5.3 Medium 2024-08-14
CVE-2024-27267 IBM SDK, Java Technology Edition denial of service — SDK, Java Technology Edition CWE-362 5.9 Medium 2024-08-14
CVE-2024-28799 IBM QRadar Suite Software information disclosure — QRadar Suite Software CWE-214 5.6 Medium 2024-08-14
CVE-2024-35124 IBM OpenBMC authentication bypass — OpenBMC CWE-288 7.5 High 2024-08-13
CVE-2024-41774 IBM Common Licensing cross-site scripting — Common Licensing CWE-79 4.8 Medium 2024-08-13
CVE-2024-40697 IBM Common Licensing information disclosure — Common Licensing CWE-521 7.5 High 2024-08-13
CVE-2022-38382 IBM Cloud Pak for Security session fixation — QRadar Suite Software CWE-613 4.7 Medium 2024-08-13
CVE-2023-38018 IBM Aspera Shares session fixation — Aspera Shares CWE-384 6.3 Medium 2024-08-09
CVE-2024-39751 IBM InfoSphere Information Server information disclosure — InfoSphere Information Server CWE-209 4.3 Medium 2024-08-06
CVE-2024-35143 IBM Planning Analytics Local missing authentication — Planning Analytics Local CWE-306 6.7 Medium 2024-08-04
CVE-2024-38321 IBM Business Automation Workflow information disclosure — Business Automation Workflow CWE-532 5.3 Medium 2024-08-03
CVE-2022-33167 IBM Security Directory Integrator information disclosure — Security Directory Integrator CWE-1004 3.7 Low 2024-07-30
CVE-2023-26288 IBM Aspera Orchestrator session fixation — Aspera Orchestrator CWE-613 5.5 Medium 2024-07-30
CVE-2023-38001 IBM Aspera Orchestrator cross-site request forgery — Aspera Orchestrator CWE-352 6.5 Medium 2024-07-30
CVE-2023-26289 IBM Aspera Orchestrator HTTP header injection — Aspera Orchestrator CWE-644 5.4 Medium 2024-07-30
CVE-2024-40689 IBM InfoSphere Information Server SQL injection — InfoSphere Information Server CWE-89 6.0 Medium 2024-07-26
CVE-2024-28772 IBM Security Directory Integrator cross-site scripting — Security Directory Integrator CWE-79 6.8 Medium 2024-07-25
CVE-2022-32759 IBM Security Directory Server information disclosure — Security Directory Integrator CWE-613 5.3 Medium 2024-07-25
CVE-2024-37533 IBM InfoSphere Information Server information disclosure — InfoSphere Information Server CWE-359 2.4 Low 2024-07-24
CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection — Engineering Requirements Management DOORS CWE-611 7.1 High 2024-07-18
CVE-2024-28796 IBM Rational ClearQuest 跨站脚本漏洞 — ClearQuest CWE-79 6.4 Medium 2024-07-17
CVE-2023-42010 IBM Sterling B2B Integrator Standard Edition information disclosure — Sterling B2B Integrator Standard Edition CWE-497 3.1 Low 2024-07-17
CVE-2022-35640 IBM Sterling Partner Engagement Manager information disclosure — Sterling Partner Engagement Manager CWE-209 4.0 Medium 2024-07-16
CVE-2024-39740 IBM Datacap Navigator information disclosure — Datacap Navigator CWE-497 4.3 Medium 2024-07-15
CVE-2024-39741 IBM Datacap Navigator directory traversal — Datacap Navigator CWE-22 4.3 Medium 2024-07-15
CVE-2024-39729 IBM Datacap Navigator information disclosure — Datacap Navigator CWE-540 4.3 Medium 2024-07-15

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.