Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Top products by IBM: AIX DB2 for Linux, UNIX and Windows i WebSphere Application Server InfoSphere Information Server Sterling B2B Integrator Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Langflow OSS Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager Spectrum Protect Plus Spectrum Scale Robotic Process Automation UrbanCode Deploy Cognos Controller DB2 Aspera Faspex Sterling File Gateway Security Verify Access Rational DOORS Next Generation Security Identity Governance and Intelligence Cloud Pak System Cloud Pak for Security Concert
CVE ID Title CVSS Severity Published
CVE-2023-47700 IBM Storage Virtualize improper certificate validation — Storage Virtualize CWE-295 5.9 Medium 2024-02-07
CVE-2023-38369 IBM Security Access Manager Container information disclosure — Security Verify Access Appliance CWE-521 6.2 Medium 2024-02-07
CVE-2023-31002 IBM Security Access Manager Container information disclosure — Security Verify Access Appliance 5.1 Medium 2024-02-07
CVE-2023-43017 IBM Security Verify Access man in the middle — Security Verify Access Appliance CWE-295 8.2 High 2024-02-07
CVE-2023-32330 IBM Security Verify Access man in the middle — Security Verify Access Appliance CWE-295 7.5 High 2024-02-07
CVE-2023-32328 IBM Security Verify Access information disclosure — Security Verify Access Appliance CWE-319 7.5 High 2024-02-07
CVE-2024-22331 IBM UrbanCode Deploy information disclosure — UrbanCode Deploy CWE-200 6.2 Medium 2024-02-06
CVE-2023-46183 IBM PowerVM Hypervisor information disclosure — PowerVM Hypervisor CWE-200 5.3 Medium 2024-02-06
CVE-2023-33851 IBM PowerVM Hypervisor information disclosure — PowerVM Hypervisor CWE-200 5.3 Medium 2024-02-04
CVE-2023-50947 IBM Business Automation Workflow cross-site scripting — Business Automation Workflow CWE-79 5.4 Medium 2024-02-04
CVE-2023-31006 IBM Security Access Manager Container denial of service — Security Verify Access Appliance CWE-400 6.5 Medium 2024-02-03
CVE-2023-31004 IBM Security Access Manager Container gain access — Security Verify Access Appliance CWE-300 8.3 High 2024-02-03
CVE-2023-32329 IBM Security Access Manager Container improper file validation — Security Verify Access Appliance CWE-345 6.2 Medium 2024-02-03
CVE-2023-32327 IBM Security Access Manager Container XML external entity injection — Security Verify Access Appliance CWE-611 7.1 High 2024-02-03
CVE-2023-43016 IBM Security Access Manager Container unauthorized access — Security Verify Access Appliance CWE-258 7.3 High 2024-02-03
CVE-2023-30999 IBM Security Access Manager denial of service — Security Verify Access Appliance CWE-400 7.5 High 2024-02-03
CVE-2023-31005 IBM Security Access Manager Container privilege escalation — Security Verify Access Appliance CWE-269 6.2 Medium 2024-02-03
CVE-2023-38273 IBM Cloud Pak System information disclosure — Cloud Pak System CWE-307 7.5 High 2024-02-02
CVE-2023-47142 IBM Tivoli Application Dependency Discovery Manager privilege escalation — Tivoli Application Dependency Discovery Manager CWE-863 7.5 High 2024-02-02
CVE-2023-47144 IBM Tivoli Application Dependency Discovery Manager cross-site scripting — Tivoli Application Dependency Discovery Manager CWE-79 6.1 Medium 2024-02-02
CVE-2023-47143 IBM Tivoli Application Dependency Discovery Manager HOST header injection — Tivoli Application Dependency Discovery Manager CWE-644 10.0 Critical 2024-02-02
CVE-2023-47148 IBM Storage Protect Plus Server information disclosure — Storage Protect Plus Server CWE-862 5.3 Medium 2024-02-02
CVE-2023-38020 IBM SOAR QRadar Plugin App log injection — SOAR QRadar Plugin App CWE-117 4.3 Medium 2024-02-02
CVE-2023-38019 IBM SOAR QRadar Plugin App directory traversal — SOAR QRadar Plugin App CWE-22 8.1 High 2024-02-02
CVE-2023-38263 IBM SOAR QRadar Plugin App improper access controls — SOAR QRadar Plugin App CWE-284 6.5 Medium 2024-02-02
CVE-2022-40744 IBM Aspera Faspex cross-site scripting — Aspera Faspex CWE-79 4.8 Medium 2024-02-02
CVE-2023-46159 IBM Storage Ceph denial of service — Storage Ceph CWE-20 2.6 Low 2024-02-02
CVE-2024-22320 IBM Operational Decision Manager code execution — Operational Decision Manager CWE-502 9.8 Critical 2024-02-02
CVE-2024-22319 IBM Operational Decision Manager JDNI injection — Operational Decision Manager CWE-74 8.1 High 2024-02-02
CVE-2023-32333 IBM Maximo Asset Management improper access control — Maximo Asset Management CWE-284 6.5 Medium 2024-02-02

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.