Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2023-35018 IBM Security Verify Governance file upload — Security Verify Governance CWE-434 3.3 Low 2023-10-15
CVE-2023-35013 IBM Security Verify Governance information disclosure — Security Verify Governance CWE-540 2.3 Low 2023-10-15
CVE-2023-40378 IBM i privilege escalation — i CWE-269 4.9 Medium 2023-10-15
CVE-2023-30994 IBM QRadar SIEM information disclosure — QRadar SIEM CWE-327 5.4 Medium 2023-10-14
CVE-2023-40367 IBM QRadar SIEM cross-site scripting — QRadar SIEM CWE-79 5.4 Medium 2023-10-14
CVE-2023-45176 IBM App Connect Enterprise and IBM Integration Bus denial of service — App Connect Enterprise CWE-20 6.2 Medium 2023-10-14
CVE-2022-43868 IBM Security Verify Access information disclosure — Security Verify Access CWE-200 5.3 Medium 2023-10-14
CVE-2022-43740 IBM Security Verify Access denial of service — Security Verify Access CWE-400 7.5 High 2023-10-14
CVE-2023-35024 IBM Cloud Pak for Business Automation cross-site scripting — Cloud Pak for Business Automation CWE-79 4.6 Medium 2023-10-14
CVE-2022-32755 IBM Security Directory Server external entity injection — Security Directory Server CWE-91 5.5 Medium 2023-10-14
CVE-2022-33165 IBM Security Directory Server information disclosure — Security Directory Server CWE-22 6.8 Medium 2023-10-14
CVE-2022-33161 IBM Security Directory Server information disclosure — Security Directory Server CWE-311 5.3 Medium 2023-10-14
CVE-2023-40682 IBM App Connect Enterprise information disclosure — App Connect Enterprise CWE-532 4.4 Medium 2023-10-13
CVE-2022-33160 IBM Security Directory Suite information disclosure — Security Directory Suite CWE-757 3.7 Low 2023-10-06
CVE-2022-34355 IBM Jazz Foundation information disclosure — Engineering Lifecycle Management CWE-200 4.0 Medium 2023-10-06
CVE-2023-43058 IBM Robotic Process Automation privilege escalation — Robotic Process Automation 5.3 Medium 2023-10-06
CVE-2023-35897 IBM Spectrum Protect code execution — Storage Protect Client CWE-94 8.4 High 2023-10-06
CVE-2022-43906 IBM Security Guardium information disclosure — Security Guardium 3.1 Low 2023-10-04
CVE-2023-40376 IBM UrbanCode Deploy (UCD) improper authentication controls — UrbanCode Deploy CWE-862 5.3 Medium 2023-10-04
CVE-2023-40684 IBM Content Navigator cross-site scripting — Content Navigator CWE-79 4.6 Medium 2023-10-04
CVE-2023-37404 IBM Observability with Instana code execution — Observability with Instana 6.4 Medium 2023-10-04
CVE-2023-35905 IBM FileNet Content Manager cross-site scripting — FileNet Content Manager CWE-79 4.6 Medium 2023-10-04
CVE-2022-22447 IBM Disconnected Log Collector information disclosure — Disconnected Log Collector CWE-200 4.0 Medium 2023-10-03
CVE-2023-40375 IBM i privilege escalation — i CWE-269 7.4 High 2023-09-28
CVE-2023-43044 IBM License Metric Tool directory traversal — License Metric Tool CWE-22 5.3 Medium 2023-09-28
CVE-2023-38718 IBM Robotic Process Automation information disclosure — Robotic Process Automation CWE-200 3.7 Low 2023-09-20
CVE-2023-37410 IBM Personal Communications privilege escalation — Person Communications 8.4 High 2023-09-20
CVE-2023-40368 IBM Storage Protect information disclosure — Storage Protect Client CWE-200 4.4 Medium 2023-09-20
CVE-2022-22402 IBM Aspera Faspex cross-site scripting — Aspera Faspex CWE-79 5.4 Medium 2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure — Aspera Faspex 5.9 Medium 2023-09-08

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.