Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2023-27866 IBM Informix JDBC code execution — Informix JDBC CWE-94 6.3 Medium 2023-06-28
CVE-2023-30993 IBM Cloud Pak for Security information disclosure — Cloud Pak for Security CWE-200 6.8 Medium 2023-06-27
CVE-2023-23468 IBM Robotic Process Automation for Cloud Pak access control — Robotic Process Automation for Cloud Pak 5.1 Medium 2023-06-27
CVE-2023-22593 IBM Robotic Process Automation for Cloud Pak security configuration — Robotic Process Automation for Cloud Pak 4.0 Medium 2023-06-27
CVE-2022-34352 IBM QRadar information disclosure — Security QRadar SIEM CWE-200 6.5 Medium 2023-06-27
CVE-2023-26274 IBM QRadar cross-site scripting — Security QRadar SIEM CWE-79 4.6 Medium 2023-06-27
CVE-2023-26276 IBM QRadar information disclosure — Security QRadar SIEM CWE-327 5.9 Medium 2023-06-27
CVE-2023-26273 IBM QRadar security bypass — Security QRadar SIEM CWE-20 4.3 Medium 2023-06-27
CVE-2023-32339 IBM Business Automation Workflow cross-site scripting — Business Automation Workflow CWE-79 6.1 Medium 2023-06-27
CVE-2023-33842 IBM SPSS Modeler information disclosure — SPSS Modeler 6.2 Medium 2023-06-22
CVE-2023-28956 IBM Spectrum Protect Backup-Archive Client privilege escalation — Spectrum Protect Backup-Archive Client CWE-266 8.4 High 2023-06-22
CVE-2022-32752 IBM Security Directory Suite VA command execution — Security Directory Suite VA CWE-78 7.2 High 2023-06-15
CVE-2022-32757 IBM Security Directory Suite VA information disclosure — Security Directory Suite VA CWE-307 7.5 High 2023-06-15
CVE-2022-33166 IBM Security Directory Suite VA file upload — Security Directory Suite VA CWE-434 7.2 High 2023-06-15
CVE-2022-33159 IBM Security Directory Suite VA information disclosure — Security Directory Suite VA CWE-200 5.3 Medium 2023-06-15
CVE-2022-33168 IBM Security Directory Suite VA denial of service — Security Directory Suite VA CWE-400 7.5 High 2023-06-15
CVE-2022-33163 IBM Security Directory Suite VA information disclosure — Security Directory Suite VA CWE-732 5.3 Medium 2023-06-15
CVE-2023-25683 IBM PowerVM Hypervisor information disclosure — PowerVM Hypervisor CWE-200 5.9 Medium 2023-06-15
CVE-2022-22307 IBM Security Guardium privilege escalation — Security Guardium CWE-863 4.4 Medium 2023-06-15
CVE-2023-23480 IBM Sterling Partner Engagement Manager cross-site scripting — Sterling Partner Engagement Manager CWE-79 5.4 Medium 2023-06-08
CVE-2023-23481 IBM Sterling Partner Engagement Manager cross-site scripting — Sterling Partner Engagement Manager CWE-79 6.4 Medium 2023-06-08
CVE-2023-23482 IBM Sterling Partner Engagement Manager clickjacking — Sterling Partner Engagement Manager 5.4 Medium 2023-06-08
CVE-2023-33846 IBM CICS TX cross-site scripting — TXSeries for Multiplatforms CWE-79 5.4 Medium 2023-06-08
CVE-2023-33847 IBM CICS TX information disclosure — TXSeries for Multiplatforms 3.7 Low 2023-06-08
CVE-2023-33849 IBM CICS TX information disclosure — TXSeries for Multiplatforms CWE-311 3.7 Low 2023-06-07
CVE-2023-33848 IBM CICS TX information disclosure — TXSeries for Multiplatforms CWE-200 4.9 Medium 2023-06-07
CVE-2023-0041 IBM Security Guardium session fixation — Security Guardium CWE-613 6.3 Medium 2023-06-05
CVE-2023-32334 IBM Maximo Asset Management information disclosure — Maximo Asset Management 3.7 Low 2023-06-05
CVE-2023-27861 IBM Maximo Application Suite information disclosure — Maximo Application Suite CWE-319 5.9 Medium 2023-06-05
CVE-2023-27285 IBM Aspera buffer overflow — Aspera Connect CWE-119 8.4 High 2023-06-04

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.