Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE ID Title CVSS Severity Published
CVE-2022-35719 IBM MQ Internet Pass-Thru 日志日志信息泄露漏洞 — MQ Internet Pass-Thru CWE-532 5.1 Medium 2022-11-14
CVE-2022-31772 IBM MQ denial of service — MQ CWE-20 5.3 Medium 2022-11-11
CVE-2022-40753 IBM InfoSphere Information Server cross-site scripting — InfoSphere Information Server CWE-79 5.4 Medium 2022-11-11
CVE-2022-36776 IBM Cloud Pak for Security 跨站脚本漏洞 — Cloud Pak for Security CWE-79 5.4 Medium 2022-11-11
CVE-2022-40750 IBM WebSphere Application Server cross-site scripting — WebSphere Application Server CWE-79 5.4 Medium 2022-11-11
CVE-2022-38385 IBM Cloud Pak for Security 输入验证错误漏洞 — Cloud Pak for Security CWE-20 7.1 High 2022-11-11
CVE-2022-38387 IBM Cloud Pak for Security 操作系统命令注入漏洞 — Cloud Pak for Security CWE-78 7.1 High 2022-11-11
CVE-2022-34331 IBM Power FW security bypass — Power FW CWE-287 5.5 Medium 2022-11-11
CVE-2021-39077 IBM Security Guardium information disclosure — Security Guardium CWE-319 4.4 Medium 2022-11-03
CVE-2022-38710 IBM Robotic Process Automation information disclosure — Robotic Process Automation CWE-497 5.3 - 2022-11-03
CVE-2022-42442 IBM Robotic Process Automation for Cloud Pak information disclosure — Robotic Process Automation for Cloud Pak 4.0 - 2022-11-03
CVE-2022-38388 IBM Navigator Mobile 安全漏洞 — Navigator Mobile 5.5 - 2022-10-11
CVE-2022-34334 IBM Sterling Partner Engagement Manager 授权问题漏洞 — Sterling Partner Engagement Manager 8.1 - 2022-10-10
CVE-2022-41291 IBM InfoSphere Information Server 代码问题漏洞 — InfoSphere Information Server 8.1 - 2022-10-07
CVE-2022-36772 IBM InfoSphere Information Server 安全漏洞 — InfoSphere Information Server 6.5 - 2022-10-07
CVE-2022-34308 IBM CICS TX 安全漏洞 — CICS TX Standard 5.5 - 2022-10-07
CVE-2022-30613 IBM QRadar SIEM 安全漏洞 — QRadar SIEM 5.5 - 2022-10-07
CVE-2022-22493 IBM WebSphere Automation 跨站请求伪造漏洞 — WebSphere Automation for Cloud Pak for Watson AIOps 8.8 - 2022-10-07
CVE-2022-22480 IBM QRadar SIEM 安全漏洞 — QRadar SIEM 7.5 - 2022-10-07
CVE-2022-41294 IBM Robotic Process Automation 访问控制错误漏洞 — Robotic Process Automation 6.5 - 2022-10-06
CVE-2022-38709 IBM Robotic Process Automation 跨站脚本漏洞 — Robotic Process Automation 5.4 - 2022-10-06
CVE-2022-36774 IBM Robotic Process Automation 授权问题漏洞 — Robotic Process Automation 6.5 - 2022-10-06
CVE-2022-22503 IBM Robotic Process Automation 安全漏洞 — Robotic Process Automation 6.1 - 2022-10-06
CVE-2022-39168 IBM Robotic Process Automation 安全漏洞 — Robotic Process Automation 5.5 - 2022-09-29
CVE-2022-36771 IBM QRadar User Behavior Analytics 安全漏洞 — QRadar User Behavior Analytics 6.5 - 2022-09-28
CVE-2022-35722 IBM Jazz for Service Management 跨站脚本漏洞 — Jazz for Service Management 5.4 - 2022-09-28
CVE-2022-22387 IBM Application Gateway 跨站脚本漏洞 — Application Gateway 5.4 - 2022-09-28
CVE-2022-35282 IBM WebSphere Application Server 代码问题漏洞 — WebSphere Application Server 5.7 - 2022-09-28
CVE-2022-40748 IBM InfoSphere Information Server 跨站脚本漏洞 — InfoSphere Information Server 5.4 - 2022-09-23
CVE-2022-35721 IBM Jazz for Service Management 跨站脚本漏洞 — Jazz for Service Management 5.4 - 2022-09-23

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.