Browse all 5906 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.
IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2018-1674 | IBM Business Process Manager SQL注入漏洞 — Business Process Manager | 9.8 | - | 2018-09-20 |
| CVE-2018-1800 | IBM Sterling B2B Integrator 信息泄露漏洞 — Sterling B2B Integrator | 5.5 | - | 2018-09-20 |
| CVE-2017-1794 | IBM Tivoli Monitoring 安全漏洞 — Tivoli Monitoring | 7.5 | - | 2018-09-19 |
| CVE-2018-1782 | IBM GPFS 安全漏洞 — Spectrum Scale | 6.5 | - | 2018-09-19 |
| CVE-2018-1719 | IBM WebSphere Application Server 信息泄露漏洞 — WebSphere Application Server | 7.4 | - | 2018-09-14 |
| CVE-2018-1791 | IBM Connections 安全漏洞 — Connections | 4.9 | - | 2018-09-14 |
| CVE-2018-1698 | IBM Maximo Asset Management 安全漏洞 — Maximo Asset Management | 5.3 | - | 2018-09-13 |
| CVE-2018-1773 | IBM Datacap Fastdoc Capture 安全漏洞 — Datacap | 8.3 | - | 2018-09-12 |
| CVE-2018-1571 | IBM QRadar 操作系统命令注入漏洞 — QRadar SIEM | 8.8 | - | 2018-09-11 |
| CVE-2017-1679 | IBM OpenPages GRC Platform 信息泄露漏洞 — OpenPages GRC Platform | 3.3 | - | 2018-09-10 |
| CVE-2017-1114 | IBM Campaign 跨站脚本漏洞 — Campaign | 5.4 | - | 2018-09-07 |
| CVE-2017-1115 | IBM Campaign 安全漏洞 — Campaign | 5.4 | - | 2018-09-07 |
| CVE-2018-1567 | IBM WebSphere Application Server 代码问题漏洞 — WebSphere Application Server | 9.8 | - | 2018-09-07 |
| CVE-2018-1756 | IBM Security Identity Governance and Intelligence SQL注入漏洞 — Security Identity Governance and Intelligence | 7.5 | - | 2018-09-07 |
| CVE-2018-1757 | IBM Security Identity Governance and Intelligence 访问控制错误漏洞 — Security Identity Governance and Intelligence | 7.5 | - | 2018-09-07 |
| CVE-2018-1789 | IBM API Connect 安全漏洞 — API Connect | 9.3 | - | 2018-09-07 |
| CVE-2018-1695 | IBM WebSphere Application Server 安全漏洞 — WebSphere Application Server | 4.8 | - | 2018-09-06 |
| CVE-2016-0205 | IBM Cloud Orchestrator 安全漏洞 — Cloud Orchestrator | 3.3 | - | 2018-08-30 |
| CVE-2016-0234 | IBM OpenPages GRC Platform 安全漏洞 — OpenPages GRC Platform | 3.3 | - | 2018-08-30 |
| CVE-2016-0373 | IBM UrbanCode Deploy 信息泄露漏洞 — UrbanCode Deploy | 6.5 | - | 2018-08-30 |
| CVE-2018-1705 | IBM Spectrum Symphony和Platform Symphony 信息泄露漏洞 — Platform Symphony | 6.5 | - | 2018-08-28 |
| CVE-2018-1644 | IBM WebSphere Commerce 信息泄露漏洞 — WebSphere Commerce | 4.3 | - | 2018-08-27 |
| CVE-2018-1699 | IBM Maximo Asset Management SQL注入漏洞 — Maximo Asset Management | 8.3 | - | 2018-08-24 |
| CVE-2018-1722 | IBM Security Access Manager Appliance 命令注入漏洞 — Security Access Manager Appliance | 10.0 | - | 2018-08-24 |
| CVE-2018-1755 | IBM WebSphere Application Server Liberty 信息泄露漏洞 — WebSphere Application Server | 5.9 | - | 2018-08-24 |
| CVE-2018-1599 | IBM API Connect 安全漏洞 — API Connect | 6.1 | - | 2018-08-22 |
| CVE-2017-1753 | 多款IBM产品跨站脚本漏洞 — Rational DOORS Next Generation | 5.4 | - | 2018-08-20 |
| CVE-2018-1394 | 多款IBM产品跨站脚本漏洞 — Rational DOORS Next Generation | 5.4 | - | 2018-08-20 |
| CVE-2018-1517 | IBM SDK, Java Technology Edition 输入验证错误漏洞 — SDK, Java Technology Edition | 7.5 | - | 2018-08-20 |
| CVE-2018-1656 | IBM SDK, Java Technology Edition 路径遍历漏洞 — SDK, Java Technology Edition | 6.5 | - | 2018-08-20 |
This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.