目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

IBM 厂商漏洞列表 / CVE 中文分析 5232

IBM 厂商相关 5232 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

IBM 是全球领先的科技企业，核心业务涵盖混合云、人工智能及企业级软件服务。其软件生态庞大，历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常因复杂配置或第三方组件引入风险。值得关注的是，IBM 定期发布安全公告并强化供应链审查，但部分遗留系统仍面临长期维护挑战。截至最新统计，已收录 4629 条 CVE，反映其广泛的市场渗透率与持续的安全审计需求。

Top products by IBM: AIX DB2 for Linux, UNIX and Windows i WebSphere Application Server InfoSphere Information Server Sterling B2B Integrator Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Langflow OSS Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager Spectrum Protect Plus Spectrum Scale Robotic Process Automation UrbanCode Deploy Cognos Controller DB2 Aspera Faspex Sterling File Gateway Security Verify Access Rational DOORS Next Generation Security Identity Governance and Intelligence Cloud Pak System Cloud Pak for Security Concert
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-17623 IBM Langflow OSS 命令注入漏洞 — Langflow OSS CWE-78 8.8 High 2026-08-05
CVE-2026-17630 IBM Langflow OSS 输入验证错误漏洞 — Langflow OSS CWE-184 7.2 High 2026-08-05
CVE-2026-17626 IBM Langflow OSS 权限许可和访问控制问题漏洞 — Langflow OSS CWE-266 8.8 High 2026-08-05
CVE-2026-8446 IBM Langflow OSS 授权问题漏洞 — Langflow OSS CWE-306 7.5 High 2026-08-05
CVE-2026-7646 IBM Langflow OSS 路径遍历漏洞 — Langflow OSS CWE-22 6.5 Medium 2026-08-05
CVE-2026-9077 IBM Langflow OSS 输入验证错误漏洞 — Langflow OSS CWE-807 8.5 High 2026-08-05
CVE-2026-17617 IBM Application Gateway Operator 服务端请求伪造漏洞 — Application Gateway Operator CWE-918 8.5 High 2026-08-05
CVE-2026-15656 IBM Maximo Application Suite 会话机制问题漏洞 — Maximo Application Suite CWE-614 4.3 Medium 2026-08-05
CVE-2026-18531 IBM Maximo Application Suite 加密问题漏洞 — Maximo Application Suite CWE-330 5.3 Medium 2026-08-05
CVE-2026-10025 IBM QRadar 输入验证错误漏洞 — QRadar CWE-611 8.2 High 2026-08-05
CVE-2026-13477 IBM QRadar 命令注入漏洞 — QRadar CWE-78 4.7 Medium 2026-08-05
CVE-2026-8400 IBM Websphere Application Server 代码注入漏洞 — WebSphere Application Server CWE-470 8.1 High 2026-08-05
CVE-2026-12730 IBM Business Automation Workflow containers and traditional 加密问题漏洞 — Business Automation Workflow containers and traditional CWE-297 3.8 Low 2026-08-05
CVE-2026-12762 IBM Cloud Pak For Business Automation 信息泄露漏洞 — Cloud Pak For Business Automation CWE-538 5.3 Medium 2026-08-05
CVE-2026-10569 IBM UrbanCode Deploy 敏感信息泄露漏洞 — UCD - IBM UrbanCode Deploy CWE-200 4.3 Medium 2026-07-30
CVE-2026-11536 IBM WebSphere Application Server 远程代码执行漏洞 — WebSphere Application Server CWE-502 8.5 High 2026-07-30
CVE-2026-12946 CUGA 组件 CodeAgent 远程代码执行漏洞 — Langflow OSS CWE-94 9.9 Critical 2026-07-30
CVE-2026-13444 IBM Langflow OSS 配置错误漏洞 — Langflow OSS CWE-520 - - 2026-07-30
CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access 资源管理错误漏洞 — Engineering Requirements Management DOORS and DOORS Web Access CWE-400 7.5 High 2026-07-30
CVE-2024-40683 IBM operations analytics log analysis 会话机制问题漏洞 — Operations Analytics - Log Analysis CWE-613 6.3 Medium 2026-07-30
CVE-2026-10545 IBM Planning Analytics Local 输入验证错误漏洞 — Planning Analytics Local CWE-601 7.5 High 2026-07-30
CVE-2026-12943 IBM HMC 命令注入漏洞 — HMC V10.3.1050.0 CWE-78 9.8 Critical 2026-07-30
CVE-2026-12733 IBM DataPower Gateway 资源管理错误漏洞 — DataPower Gateway 10.6CD CWE-770 7.5 High 2026-07-30
CVE-2025-36374 IBM DataPower Gateway 输入验证错误漏洞 — DataPower Gateway 10.6CD CWE-611 5.5 Medium 2026-07-30
CVE-2026-12118 IBM webMethods Integration 反序列化注入漏洞 — webMethods Integration (on prem) CWE-502 9.8 Critical 2026-07-30
CVE-2025-0152 IBM engineering requirements management doors 跨站脚本漏洞 — Engineering Requirements Management DOORS and DOORS Web Access CWE-79 6.1 Medium 2026-07-30
CVE-2026-10535 IBM Db2 缓冲区错误漏洞 — Db2 CWE-121 8.4 High 2026-07-30
CVE-2026-10695 IBM Db2 资源管理错误漏洞 — Db2 CWE-400 6.2 Medium 2026-07-30
CVE-2026-11904 IBM Verify Identity Access 信息泄露漏洞 — Verify Identity Access CWE-209 5.3 Medium 2026-07-30
CVE-2026-10700 IBM Langflow OSS 授权问题漏洞 — Langflow OSS CWE-639 6.5 Medium 2026-07-30

本页汇总了 IBM 厂商截至目前公开的全部 5232 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。