Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2023-23470 IBM i privilege escalation — i 6.4 Medium 2023-05-04
CVE-2022-39161 IBM WebSphere Application Server information disclosure — WebSphere Application Server CWE-295 4.8 Medium 2023-05-03
CVE-2023-30441 IBM Java information disclosure — Java CWE-327 7.5 High 2023-04-29
CVE-2022-43871 IBM Financial Transaction Manager for SWIFT Services cross-site scripting — Financial Transaction Manager for SWIFT Services CWE-79 4.6 Medium 2023-04-29
CVE-2022-41736 IBM Spectrum Scale Container Native Storage Access privilege escalation — Spectrum Scale Container Native Storage Access 8.4 High 2023-04-29
CVE-2023-26022 IBM Db2 denial of service — DB2 for Linux, UNIX and Windows CWE-20 5.9 Medium 2023-04-28
CVE-2023-26021 IBM Db2 denial of service — DB2 for Linux, UNIX and Windows CWE-20 7.5 High 2023-04-28
CVE-2023-27555 IBM Db2 denial of service — DB2 for Linux, UNIX and Windows CWE-20 5.1 Medium 2023-04-28
CVE-2023-25930 IBM Db2 denial of service — DB2 for Linux, UNIX and Windows CWE-20 5.9 Medium 2023-04-28
CVE-2023-27864 IBM Maximo Asset Management HTML injection — Maximo Asset Management 5.4 Medium 2023-04-28
CVE-2023-28528 IBM AIX command execution — AIX CWE-78 8.4 High 2023-04-28
CVE-2023-27557 IBM Safter Payments information disclosure — Safer Payments CWE-327 5.9 Medium 2023-04-28
CVE-2020-4729 IBM Safer Payments denial of service — Safer Payments 5.3 Medium 2023-04-28
CVE-2023-27556 IBM Safer Payments denial of service — Safer Payments CWE-770 6.5 Medium 2023-04-28
CVE-2023-27860 IBM Maximo Asset Management information disclosure — Maximo Asset Management CWE-209 5.3 Medium 2023-04-27
CVE-2023-24966 IBM WebSphere Application Server cross-site scripting — WebSphere Application Server CWE-79 6.1 Medium 2023-04-27
CVE-2023-30444 IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery — Watson Machine Learning on Cloud Pak for Data CWE-918 7.1 High 2023-04-27
CVE-2023-29255 IBM DB2 for Linux, UNIX and Windows denial of service — DB2 for Linux, UNIX and Windows CWE-20 7.5 High 2023-04-27
CVE-2023-27559 IBM Db2 denial of service — Db2 for Linux, UNIX and Windows CWE-20 5.3 Medium 2023-04-26
CVE-2023-29257 IBM Db2 code execution — Db2 for Linux, UNIX and Windows 7.2 High 2023-04-26
CVE-2023-26286 IBM AIX privilege escalation — AIX 8.4 High 2023-04-26
CVE-2022-36769 IBM Cloud Pak for Data file upload — Cloud Pak for Data CWE-77 7.2 High 2023-04-26
CVE-2022-41739 IBM Spectrum Scale privilege escalation — Spectrum Scale Container Native Storage Access 7.9 High 2023-04-26
CVE-2022-43928 IBM Db2 Mirror for i information disclosure — Db2 Mirror for i 4.9 Medium 2023-04-07
CVE-2022-43914 IBM TRIRIGA Application Platform cross-site scripting — TRIRIGA Application Platform CWE-79 4.6 Medium 2023-04-07
CVE-2023-27876 IBM TRIRIGA Application Platform XML external entity injection — TRIRIGA Application Platform CWE-611 7.1 High 2023-04-07
CVE-2022-33959 IBM Sterling Order Management privilege escalation — Sterling Order Management 5.4 Medium 2023-04-07
CVE-2022-34333 IBM Sterling Order Management information disclosure — Sterling Order Management CWE-521 5.9 Medium 2023-04-07
CVE-2023-27286 IBM Aspera code execution — Aspera CWE-119 8.4 High 2023-03-28
CVE-2023-27284 IBM Aspera code execution — Aspera CWE-119 8.4 High 2023-03-28

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.