Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2023-38001 IBM Aspera Orchestrator cross-site request forgery — Aspera OrchestratorCWE-352 6.5 Medium2024-07-30
CVE-2023-26289 IBM Aspera Orchestrator HTTP header injection — Aspera OrchestratorCWE-644 5.4 Medium2024-07-30
CVE-2024-40689 IBM InfoSphere Information Server SQL injection — InfoSphere Information ServerCWE-89 6.0 Medium2024-07-26
CVE-2024-28772 IBM Security Directory Integrator cross-site scripting — Security Directory IntegratorCWE-79 6.8 Medium2024-07-25
CVE-2022-32759 IBM Security Directory Server information disclosure — Security Directory IntegratorCWE-613 5.3 Medium2024-07-25
CVE-2024-37533 IBM InfoSphere Information Server information disclosure — InfoSphere Information ServerCWE-359 2.4 Low2024-07-24
CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection — Engineering Requirements Management DOORSCWE-611 7.1 High2024-07-18
CVE-2024-28796 IBM Rational ClearQuest 跨站脚本漏洞 — ClearQuestCWE-79 6.4 Medium2024-07-17
CVE-2023-42010 IBM Sterling B2B Integrator Standard Edition information disclosure — Sterling B2B Integrator Standard EditionCWE-497 3.1 Low2024-07-17
CVE-2022-35640 IBM Sterling Partner Engagement Manager information disclosure — Sterling Partner Engagement ManagerCWE-209 4.0 Medium2024-07-16
CVE-2024-39740 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-497 4.3 Medium2024-07-15
CVE-2024-39741 IBM Datacap Navigator directory traversal — Datacap NavigatorCWE-22 4.3 Medium2024-07-15
CVE-2024-39729 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-540 4.3 Medium2024-07-15
CVE-2024-39735 IBM Datacap Navigator cross-site scripting — Datacap NavigatorCWE-79 5.4 Medium2024-07-15
CVE-2024-39731 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-327 5.9 Medium2024-07-15
CVE-2024-39728 IBM Datacap Navigator cross-site scripting — Datacap NavigatorCWE-79 6.4 Medium2024-07-15
CVE-2024-39736 IBM Datacap Navigator HTTP HOST header injection — Datacap NavigatorCWE-644 6.5 Medium2024-07-15
CVE-2024-39737 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-209 5.4 Medium2024-07-15
CVE-2024-39739 IBM Datacap Navigator server-side request forgery — Datacap NavigatorCWE-918 5.4 Medium2024-07-15
CVE-2024-39733 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-256 5.5 Medium2024-07-14
CVE-2024-39732 IBM Datacap Navigator information disclosure — Datacap NavigatorCWE-316 4.1 Medium2024-07-14
CVE-2024-39734 IBM Datacap Navigator information disclosure — Datacap Navigator 4.3 Medium2024-07-14
CVE-2024-40690 IBM InfoSphere Server cross-site scripting — InfoSphere ServerCWE-79 5.4 Medium2024-07-12
CVE-2023-33860 IBM Security ReaQta information disclosure — Security QRadar EDRCWE-614 5.3 Medium2024-07-10
CVE-2023-33859 IBM Security ReaQta information disclosure — Security QRadar EDRCWE-204 5.3 Medium2024-07-10
CVE-2023-35006 IBM Security ReaQta HTML injection — Security QRadar EDRCWE-80 5.4 Medium2024-07-10
CVE-2024-25023 IBM QRadar Suite Software information disclosure — QRadar Suite SoftwareCWE-312 5.5 Medium2024-07-09
CVE-2024-35154 IBM WebSphere Application Server code execution — WebSphere Application ServerCWE-250 7.2 High2024-07-09
CVE-2024-39742 IBM MQ Container authentication bypass — MQ OperatorCWE-187 8.1 High2024-07-08
CVE-2024-39743 IBM MQ Container denial of service — MQ OperatorCWE-405 5.9 Medium2024-07-08

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.