IBM 厂商相关 5248 条 CVE 漏洞,含 AI 中文分析、POC、CVSS 评分与受影响产品。
IBM 是全球领先的科技企业,核心业务涵盖混合云、人工智能及企业级软件服务。其软件生态庞大,历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击,常因复杂配置或第三方组件引入风险。值得关注的是,IBM 定期发布安全公告并强化供应链审查,但部分遗留系统仍面临长期维护挑战。截至最新统计,已收录 4629 条 CVE,反映其广泛的市场渗透率与持续的安全审计需求。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2022-22456 | IBM Security Verify Governance 跨站脚本漏洞 — Security Verify Governance, Identity Manager CWE-79 | 4.2 | Medium | 2022-12-22 |
| CVE-2022-43860 | IBM Navigator for i SQL注入漏洞 — Navigator for i CWE-89 | 4.3 | Medium | 2022-12-22 |
| CVE-2022-43859 | IBM Navigator for i SQL注入漏洞 — Navigator for i CWE-89 | 6.3 | Medium | 2022-12-22 |
| CVE-2022-43858 | IBM Navigator for i 路径遍历漏洞 — Navigator for i CWE-22 | 4.3 | Medium | 2022-12-22 |
| CVE-2022-43857 | IBM Navigator for i 路径遍历漏洞 — Navigator for i CWE-22 | 4.3 | Medium | 2022-12-22 |
| CVE-2022-22461 | IBM Security Verify Governance 加密问题漏洞 — Security Verify Governance, Identity Manager CWE-327 | 5.9 | Medium | 2022-12-22 |
| CVE-2022-35646 | IBM Security Verify Governance 授权问题漏洞 — Security Verify Governance, Identity Manager CWE-287 | 5.9 | Medium | 2022-12-22 |
| CVE-2022-39166 | IBM Security Guardium 安全漏洞 — Security Guardium CWE-200 | 4.4 | Medium | 2022-12-20 |
| CVE-2022-43382 | IBM AIX 安全漏洞 — AIX CWE-399 | 6.2 | Medium | 2022-12-20 |
| CVE-2022-46771 | IBM UrbanCode Deploy 跨站脚本漏洞 — UrbanCode Deploy (UCD) CWE-79 | 4.6 | Medium | 2022-12-20 |
| CVE-2022-43875 | IBM Financial Transaction Manager 输入验证错误漏洞 — Financial Transaction Manager for SWIFT Services for Multiplatforms CWE-20 | 6.2 | Medium | 2022-12-20 |
| CVE-2022-43872 | IBM Financial Transaction Manager 安全漏洞 — Financial Transaction Manager | 5.3 | Medium | 2022-12-20 |
| CVE-2022-39160 | IBM Cognos Analytics 跨站脚本漏洞 — Cognos Analytics CWE-79 | 6.1 | Medium | 2022-12-19 |
| CVE-2022-43883 | IBM Cognos Analytics 注入漏洞 — Cognos Analytics | 6.5 | Medium | 2022-12-19 |
| CVE-2022-43887 | IBM Cognos Analytics 日志信息泄露漏洞 — Cognos Analytics CWE-532 | 5.3 | Medium | 2022-12-19 |
| CVE-2022-38708 | IBM Cognos Analytics 代码问题漏洞 — Cognos Analytics CWE-918 | 6.5 | Medium | 2022-12-19 |
| CVE-2022-40607 | IBM Spectrum Scale 路径遍历漏洞 — Spectrum Scale CWE-22 | 6.8 | Medium | 2022-12-19 |
| CVE-2020-4497 | IBM Spectrum Protect Plus 安全漏洞 — Spectrum Protect Plus CWE-319 | 6.8 | Medium | 2022-12-14 |
| CVE-2022-41299 | IBM Cloud Transformation Advisor 跨站脚本漏洞 — Cloud Transformation Advisor CWE-79 | 4.4 | Medium | 2022-12-09 |
| CVE-2022-43581 | IBM Content Navigator 缓冲区错误漏洞 — Content Navigator CWE-119 | 7.5 | High | 2022-12-07 |
| CVE-2022-41735 | IBM Business Process Manager 跨站脚本漏洞 — Business Process Manager CWE-79 | 5.4 | Medium | 2022-12-07 |
| CVE-2022-43867 | IBM Spectrum Scale 操作系统命令注入漏洞 — Spectrum Scale CWE-78 | 7.8 | High | 2022-12-06 |
| CVE-2022-34361 | IBM Sterling Secure Proxy 加密问题漏洞 — Sterling Secure Proxy CWE-327 | 5.9 | Medium | 2022-12-06 |
| CVE-2022-43901 | IBM WebSphere Automation 安全漏洞 — WebSphere Automation for Cloud Pak for Watson AIOps CWE-200 | 5.7 | Medium | 2022-12-01 |
| CVE-2022-41297 | IBM DB2 跨站请求伪造漏洞 — Db2U CWE-352 | 4.3 | Medium | 2022-12-01 |
| CVE-2022-41296 | IBM DB2 跨站请求伪造漏洞 — Db2U CWE-352 | 6.5 | Medium | 2022-12-01 |
| CVE-2021-38997 | IBM API Connect 安全漏洞 — API Connect CWE-644 | 5.4 | Medium | 2022-12-01 |
| CVE-2022-41732 | IBM Maximo Mobile 安全漏洞 — Maximo Mobile CWE-256 | 6.2 | Medium | 2022-11-28 |
| CVE-2022-40228 | IBM DataPower Gateway 代码问题漏洞 — DataPower Gateway CWE-613 | 3.7 | Low | 2022-11-22 |
| CVE-2022-40746 | IBM i 代码问题漏洞 — i CWE-77 | 7.2 | High | 2022-11-21 |
本页汇总了 IBM 厂商截至目前公开的全部 5248 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接,并附带 AI 生成的中文分析以便快速判断风险。