IBM 厂商相关 5232 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
IBM 是全球领先的科技企业，核心业务涵盖混合云、人工智能及企业级软件服务。其软件生态庞大，历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常因复杂配置或第三方组件引入风险。值得关注的是，IBM 定期发布安全公告并强化供应链审查，但部分遗留系统仍面临长期维护挑战。截至最新统计，已收录 4629 条 CVE，反映其广泛的市场渗透率与持续的安全审计需求。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-36019 | IBM Concert 跨站脚本漏洞 — Concert CWE-79 | 6.1 | Medium | 2026-02-17 |
| CVE-2025-12755 | IBM MQ 安全漏洞 — MQ Operator CWE-117 | 4.0 | Medium | 2026-02-17 |
| CVE-2025-36247 | IBM Db2 代码问题漏洞 — Db2 for Linux, UNIX and Windows CWE-611 | 7.1 | High | 2026-02-17 |
| CVE-2025-36425 | IBM Db2 安全漏洞 — Db2 for Linux, UNIX and Windows CWE-256 | 5.3 | Medium | 2026-02-17 |
| CVE-2025-13867 | IBM Db2 安全漏洞 — Db2 for Linux, UNIX and Windows CWE-1284 | 6.5 | Medium | 2026-02-17 |
| CVE-2025-14689 | IBM Db2 安全漏洞 — Db2 for Linux, UNIX and Windows CWE-1284 | 6.5 | Medium | 2026-02-17 |
| CVE-2025-14150 | IBM webMethods Integration 安全漏洞 — webMethods Integration (on prem) - Integration Server CWE-497 | 6.5 | Medium | 2026-02-05 |
| CVE-2025-13491 | IBM App Connect Enterprise Certified Container 代码问题漏洞 — App Connect Enterprise Certified Container CWE-426 | 5.1 | Medium | 2026-02-05 |
| CVE-2025-13379 | IBM Aspera Console SQL注入漏洞 — Aspera Console CWE-89 | 8.6 | High | 2026-02-05 |
| CVE-2024-51451 | IBM Concert 安全漏洞 — Concert CWE-644 | 6.5 | Medium | 2026-02-04 |
| CVE-2024-43181 | IBM Concert 代码问题漏洞 — Concert CWE-613 | 6.3 | Medium | 2026-02-04 |
| CVE-2024-40685 | IBM Operations Analytics - Log Analysis 跨站请求伪造漏洞 — Operations Analytics - Log Analysis CWE-352 | 4.3 | Medium | 2026-02-04 |
| CVE-2025-2134 | IBM Jazz Reporting Service（JRS） 安全漏洞 — Jazz Reporting Service CWE-410 | 3.5 | Low | 2026-02-04 |
| CVE-2025-27550 | IBM Jazz Reporting Service（JRS） 安全漏洞 — Jazz Reporting Service CWE-497 | 3.5 | Low | 2026-02-04 |
| CVE-2025-1823 | IBM Jazz Reporting Service 安全漏洞 — Jazz Reporting Service CWE-770 | 3.5 | Low | 2026-02-04 |
| CVE-2024-39724 | IBM Db2 Big SQL on Cloud Pak for Data 安全漏洞 — Db2 Big SQL on Cloud Pak for Data CWE-770 | 5.3 | Medium | 2026-02-04 |
| CVE-2023-38281 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System CWE-209 | 5.3 | Medium | 2026-02-04 |
| CVE-2023-38017 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System CWE-209 | 5.3 | Medium | 2026-02-04 |
| CVE-2025-13375 | IBM Common Cryptographic Architecture 安全漏洞 — Common Cryptographic Architecture CWE-250 | 9.8 | Critical | 2026-02-04 |
| CVE-2023-38010 | IBM Cloud Pak System 安全漏洞 — Cloud Pak System CWE-209 | 5.3 | Medium | 2026-02-04 |
| CVE-2025-33081 | IBM Concert 安全漏洞 — Concert CWE-312 | 3.3 | Low | 2026-02-03 |
| CVE-2025-36033 | IBM Engineering Lifecycle Management - Global Configuration Management 跨站脚本漏洞 — Engineering Lifecycle Management - Global Configuration Management CWE-79 | 5.4 | Medium | 2026-02-03 |
| CVE-2025-36094 | IBM Cloud Pak for Business Automation 安全漏洞 — Cloud Pak for Business Automation CWE-1284 | 5.4 | Medium | 2026-02-03 |
| CVE-2025-36194 | IBM PowerVM Hypervisor 安全漏洞 — PowerVM Hypervisor CWE-1262 | 2.8 | Low | 2026-02-02 |
| CVE-2025-36238 | IBM PowerVM Hypervisor 安全漏洞 — PowerVM Hypervisor CWE-497 | 6.0 | Medium | 2026-02-02 |
| CVE-2025-36253 | IBM Concert 安全漏洞 — Concert CWE-759 | 5.9 | Medium | 2026-02-02 |
| CVE-2025-36436 | IBM Cloud Pak for Business Automation 跨站脚本漏洞 — Cloud Pak for Business Automation CWE-79 | 6.4 | Medium | 2026-02-02 |
| CVE-2025-13096 | IBM Business Automation Workflow 代码问题漏洞 — Business Automation Workflow containers CWE-918 | 7.1 | High | 2026-02-02 |
| CVE-2025-14914 | IBM WebSphere Application Server Liberty 路径遍历漏洞 — WebSphere Application Server Liberty CWE-22 | 7.6 | High | 2026-02-02 |
| CVE-2025-15395 | IBM Jazz Foundation 安全漏洞 — Jazz Foundation CWE-863 | 4.3 | Medium | 2026-02-02 |
本页汇总了 IBM 厂商截至目前公开的全部 5232 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。