Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2023-26283 IBM WebSphere Application Server cross-site scripting — WebSphere Application Server CWE-79 5.4 Medium 2023-03-22
CVE-2022-43863 IBM QRadar SIEM privilege escalation — QRadar SIEM CWE-20 6.7 Medium 2023-03-22
CVE-2023-25684 IBM Security Key Lifecycle Manager SQL injection — Security Key Lifecycle Manager CWE-89 6.5 Medium 2023-03-21
CVE-2023-25686 IBM Security Key Lifecycle Manager information disclosure — Security Key Lifecycle Manager 6.2 Medium 2023-03-21
CVE-2023-25923 IBM Security Key Lifecycle Manager denial of service — Security Key Lifecycle Manager CWE-863 2.7 Low 2023-03-21
CVE-2023-25688 IBM Security Key Lifecycle Manager information disclosure — Security Key Lifecycle Manager CWE-22 4.3 Medium 2023-03-21
CVE-2023-25687 IBM Security Key Lifecycle Manager information disclosure — Security Key Lifecycle Manager CWE-209 4.3 Medium 2023-03-21
CVE-2023-25924 IBM Security Key Lifecycle Manager improper authorization — Security Key Lifecycle Manager CWE-863 5.4 Medium 2023-03-21
CVE-2023-25689 IBM Security Key Lifecycle Manager information disclosure — Security Key Lifecycle Manager CWE-22 2.7 Low 2023-03-21
CVE-2023-27873 IBM Aspera Faspex information disclosure — Aspera Faspex 6.5 Medium 2023-03-21
CVE-2023-27874 IBM Aspera Faspex XML external entity injection — Aspera Faspex CWE-611 9.9 Critical 2023-03-21
CVE-2023-27871 IBM Aspera Faspex information disclosure — Aspera Faspex 7.5 High 2023-03-21
CVE-2023-27875 IBM Aspera Faspex improper access controls — Aspera Faspex 7.5 High 2023-03-16
CVE-2023-22591 IBM Robotic Process Automation session fixation — Robotic Process Automation CWE-613 3.9 Low 2023-03-15
CVE-2022-46773 IBM Robotic Process Automation security bypass — Robotic Process Automation CWE-287 4.3 Medium 2023-03-15
CVE-2023-25680 IBM Robotic Process Automation information disclosure — Robotic Process Automation CWE-200 4.2 Medium 2023-03-15
CVE-2020-4556 IBM Financial Transaction Manager information disclosure — Financial Transaction Manager 4.0 Medium 2023-03-15
CVE-2023-22876 IBM Sterling B2B Integrator information disclosure — Sterling B2B Integrator CWE-200 4.3 Medium 2023-03-15
CVE-2022-46774 IBM Manage Application security bypass — Manage Application CWE-287 5.4 Medium 2023-03-15
CVE-2020-4927 IBM Spectrum Scale information disclosure — Spectrum Scale CWE-200 5.7 Medium 2023-03-15
CVE-2023-26284 IBM MQ Certified Container improper access controls — MQ Certified Container 7.5 High 2023-03-15
CVE-2022-43874 IBM App Connect Enterprise Certified Container — App Connect Enterprise Certified Container CWE-79 6.1 Medium 2023-03-15
CVE-2023-27290 IBM Observability with Instana missing authentication — Observability with Instana CWE-306 9.1 Critical 2023-03-03
CVE-2023-24975 IBM Spectrum Symphony HOST header injection — Spectrum Symphony 5.4 Medium 2023-03-02
CVE-2022-35645 IBM Maximo Asset Management cross-site scripting — Maximo Asset Management CWE-79 6.4 Medium 2023-03-02
CVE-2020-5026 IBM Financial Transaction Manager 安全漏洞 — Financial Transaction Manager CWE-209 4.3 Medium 2023-03-01
CVE-2020-5002 IBM Financial Transaction Manager security bypass — Financial Transaction Manager 4.3 Medium 2023-03-01
CVE-2020-5001 IBM Financial Transaction Manager path traversal — Financial Transaction Manager CWE-22 4.3 Medium 2023-03-01
CVE-2022-43902 IBM MQ denial of service — MQ 6.5 Medium 2023-03-01
CVE-2023-26281 IBM HTTP Server denial of service — HTTP Server CWE-20 5.9 Medium 2023-02-28

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.