Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2022-34330 IBM Sterling B2B Integrator cross-site scripting — Sterling B2B Integrator CWE-79 6.1 Medium 2023-01-04
CVE-2022-22352 IBM Sterling B2B Integrator Standard Edition cross-site scripting — Sterling B2B Integrator Standard Edition CWE-79 5.4 Medium 2023-01-04
CVE-2022-42435 IBM Business Automation Workflow cross-site request forgery — Business Automation Workflow CWE-352 4.3 Medium 2023-01-03
CVE-2022-41290 IBM AIX privilege escalation — AIX CWE-250 8.4 High 2022-12-23
CVE-2022-39164 IBM AIX denial of service — AIX CWE-400 6.2 Medium 2022-12-23
CVE-2022-43849 IBM AIX denial of service — AIX CWE-20 6.2 Medium 2022-12-23
CVE-2022-43848 IBM AIX denial of service — AIX CWE-20 6.2 Medium 2022-12-23
CVE-2022-39165 IBM AIX denial of service — AIX CWE-400 6.2 Medium 2022-12-23
CVE-2022-40233 IBM AIX denial of service — AIX CWE-20 6.2 Medium 2022-12-23
CVE-2022-43380 IBM AIX denial of service — AIX CWE-399 6.2 Medium 2022-12-23
CVE-2022-43381 IBM AIX denial of service — AIX CWE-399 6.2 Medium 2022-12-23
CVE-2022-22449 IBM Security Verify Governance, Identity Manager information disclosure — Security Verify Governance, Identity Manager CWE-209 5.3 Medium 2022-12-22
CVE-2022-22457 IBM Security Verify Governance, Identity Manager information disclosure — Security Verify Governance, Identity Manager CWE-319 5.3 Medium 2022-12-22
CVE-2022-22458 IBM Security Verify Governance, Identity Manager information disclosure — Security Verify Governance, Identity Manager CWE-256 6.3 Medium 2022-12-22
CVE-2022-22456 IBM Security Verify Governance, Identity Manager cross-site scripting — Security Verify Governance, Identity Manager CWE-79 4.2 Medium 2022-12-22
CVE-2022-43860 IBM Navigator for i SQL injection — Navigator for i CWE-89 4.3 Medium 2022-12-22
CVE-2022-43859 IBM Navigator for i SQL injection — Navigator for i CWE-89 6.3 Medium 2022-12-22
CVE-2022-43858 IBM Navigator for i information disclosure — Navigator for i CWE-22 4.3 Medium 2022-12-22
CVE-2022-43857 IBM Navigator for i information disclosure — Navigator for i CWE-22 4.3 Medium 2022-12-22
CVE-2022-22461 IBM Security Verify Governance, Identity Manager information disclosure — Security Verify Governance, Identity Manager CWE-327 5.9 Medium 2022-12-22
CVE-2022-35646 IBM Security Verify Governance, Identity Manager security bypass — Security Verify Governance, Identity Manager CWE-287 5.9 Medium 2022-12-22
CVE-2022-39166 IBM Security Guardium information disclosure — Security Guardium CWE-200 4.4 Medium 2022-12-20
CVE-2022-43382 IBM AIX denial of service — AIX CWE-399 6.2 Medium 2022-12-20
CVE-2022-46771 IBM UrbanCode Deploy (UCD) cross-site scripting — UrbanCode Deploy (UCD) CWE-79 4.6 Medium 2022-12-20
CVE-2022-43875 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service — Financial Transaction Manager for SWIFT Services for Multiplatforms CWE-20 6.2 Medium 2022-12-20
CVE-2022-43872 IBM Financial Transaction Manager information disclosure — Financial Transaction Manager 5.3 Medium 2022-12-20
CVE-2022-39160 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.1 Medium 2022-12-19
CVE-2022-43883 IBM Cognos Analytics data manipulation — Cognos Analytics 6.5 Medium 2022-12-19
CVE-2022-43887 IBM Cognos Analytics information disclosure — Cognos Analytics CWE-532 5.3 Medium 2022-12-19
CVE-2022-38708 IBM Cognos Analytics server-side request forgery — Cognos Analytics CWE-918 6.5 Medium 2022-12-19

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.