Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2024-31879 IBM i denial of service — i CWE-502 7.5 High 2024-05-18
CVE-2023-47717 IBM Security Guardium denial of service — Security Guardium 4.4 Medium 2024-05-16
CVE-2024-27260 IBM AIX command execution — AIX CWE-250 8.4 High 2024-05-16
CVE-2023-43040 IBM Spectrum Fusion HCI improper access control — Spectrum Fusion HCI CWE-1220 6.5 Medium 2024-05-13
CVE-2023-47711 IBM Security Guardium denial of service — Security Guardium CWE-434 2.7 Low 2024-05-11
CVE-2023-47712 IBM Security Guardium privilege escalation — Security Guardium CWE-732 7.8 High 2024-05-11
CVE-2023-47709 IBM Security Guardium command injection — Security Guardium CWE-78 9.1 Critical 2024-05-11
CVE-2024-28760 IBM App Connect Enterprise denial of service — App Connect Enterprise CWE-770 4.3 Medium 2024-05-11
CVE-2024-28761 IBM App Connect Enterprise HTML injection — App Connect Enterprise 5.4 Medium 2024-05-11
CVE-2024-22345 IBM TXSeries for Multiplatforms information disclosure — TXSeries for Multiplatforms CWE-522 6.2 Medium 2024-05-10
CVE-2024-22344 IBM TXSeries for Multiplatforms information disclosure — TXSeries for Multiplatforms 6.1 Medium 2024-05-10
CVE-2024-22343 IBM TXSeries for Multiplatforms information disclosure — TXSeries for Multiplatforms CWE-525 4.0 Medium 2024-05-10
CVE-2023-38264 IBM SDK, Java Technology Edition denial of service — SDK, Java Technology Edition CWE-502 5.9 Medium 2024-05-10
CVE-2024-27269 IBM QRadar SIEM information disclosure — QRadar SIEM CWE-286 6.8 Medium 2024-05-10
CVE-2024-28781 IBM UrbanCode Deploy cross-site scripting — UrbanCode Deploy CWE-79 5.4 Medium 2024-05-10
CVE-2023-40694 IBM Watson CP4D Data Stores information disclosure — Watson CP4D Data Stores CWE-532 6.2 Medium 2024-05-07
CVE-2024-27273 IBM AIX privilege escalation — AIX CWE-266 8.1 High 2024-05-07
CVE-2023-27283 IBM Aspera Orchestrator information disclosure — Aspera Orchestrator CWE-204 5.3 Medium 2024-05-04
CVE-2023-40695 IBM Cognos Controller session fixation — Cognos Controller CWE-613 6.3 Medium 2024-05-03
CVE-2021-20451 IBM Cognos Controller SQL injection — Cognos Controller CWE-89 6.0 Medium 2024-05-03
CVE-2022-22364 IBM Cognos Controller security bypass — Cognos Controller CWE-350 5.3 Medium 2024-05-03
CVE-2023-28952 IBM Cognos Controller log injection — Cognos Controller CWE-117 5.3 Medium 2024-05-03
CVE-2023-38724 IBM Cognos Controller SQL injection — Cognos Controller CWE-89 6.3 Medium 2024-05-03
CVE-2023-40696 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2024-05-03
CVE-2021-20556 IBM Cognos Controller information disclosure — Cognos Controller CWE-204 5.3 Medium 2024-05-03
CVE-2023-23474 IBM Cognos Controller information disclosure — Cognos Controller CWE-209 3.7 Low 2024-05-03
CVE-2021-20450 IBM Cognos Controller information disclosure — Cognos Controller 4.3 Medium 2024-05-03
CVE-2020-4874 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2024-05-03
CVE-2023-37407 IBM Aspera Orchestrator command execution — Aspera Orchestrator CWE-78 8.8 High 2024-05-03
CVE-2024-25047 IBM Cognos Analytics log injection — Cognos Analytics CWE-117 8.6 High 2024-05-02

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.