Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2023-38273 IBM Cloud Pak System information disclosure — Cloud Pak SystemCWE-307 7.5 High2024-02-02
CVE-2023-47142 IBM Tivoli Application Dependency Discovery Manager privilege escalation — Tivoli Application Dependency Discovery ManagerCWE-863 7.5 High2024-02-02
CVE-2023-47144 IBM Tivoli Application Dependency Discovery Manager cross-site scripting — Tivoli Application Dependency Discovery ManagerCWE-79 6.1 Medium2024-02-02
CVE-2023-47143 IBM Tivoli Application Dependency Discovery Manager HOST header injection — Tivoli Application Dependency Discovery ManagerCWE-644 10.0 Critical2024-02-02
CVE-2023-47148 IBM Storage Protect Plus Server information disclosure — Storage Protect Plus ServerCWE-862 5.3 Medium2024-02-02
CVE-2023-38020 IBM SOAR QRadar Plugin App log injection — SOAR QRadar Plugin AppCWE-117 4.3 Medium2024-02-02
CVE-2023-38019 IBM SOAR QRadar Plugin App directory traversal — SOAR QRadar Plugin AppCWE-22 8.1 High2024-02-02
CVE-2023-38263 IBM SOAR QRadar Plugin App improper access controls — SOAR QRadar Plugin AppCWE-284 6.5 Medium2024-02-02
CVE-2022-40744 IBM Aspera Faspex cross-site scripting — Aspera FaspexCWE-79 4.8 Medium2024-02-02
CVE-2023-46159 IBM Storage Ceph denial of service — Storage CephCWE-20 2.6 Low2024-02-02
CVE-2024-22320 IBM Operational Decision Manager code execution — Operational Decision ManagerCWE-502 9.8 Critical2024-02-02
CVE-2024-22319 IBM Operational Decision Manager JDNI injection — Operational Decision ManagerCWE-74 8.1 High2024-02-02
CVE-2023-32333 IBM Maximo Asset Management improper access control — Maximo Asset ManagementCWE-284 6.5 Medium2024-02-02
CVE-2023-50962 IBM PowerSC information disclosure — PowerSCCWE-319 5.9 Medium2024-02-02
CVE-2023-50328 IBM PowerSC information disclosure — PowerSCCWE-598 3.7 Low2024-02-02
CVE-2023-50938 IBM PowerSC clickjacking — PowerSCCWE-451 6.5 Medium2024-02-02
CVE-2023-50935 IBM PowerSC forced browsing — PowerSCCWE-425 6.5 Medium2024-02-02
CVE-2023-50941 IBM PowerSC session fixation — PowerSCCWE-384 6.3 Medium2024-02-02
CVE-2023-50934 IBM PowerSC improper authentication — PowerSCCWE-308 5.3 Medium2024-02-02
CVE-2023-50940 IBM PowerSC cross-resource origin sharing — PowerSCCWE-942 5.3 Medium2024-02-02
CVE-2023-50936 IBM PowerSC session fixation — PowerSCCWE-613 6.3 Medium2024-02-02
CVE-2023-50327 IBM PowerSC weak security — PowerSCCWE-650 5.3 Medium2024-02-02
CVE-2023-50937 IBM PowerSC information disclosure — PowerSCCWE-327 5.9 Medium2024-02-02
CVE-2023-50933 IBM PowerSC HTML injection — PowerSC 6.1 Medium2024-02-02
CVE-2023-50326 IBM PowerSC information Disclosure — PowerSCCWE-307 7.5 High2024-02-02
CVE-2023-50939 IBM PowerSC information Disclosure — PowerSCCWE-327 5.9 Medium2024-02-01
CVE-2023-47141 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2024-01-22
CVE-2023-47158 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2024-01-22
CVE-2023-47152 IBM Db2 information disclosure — Db2 for Linux, UNIX and WindowsCWE-209 5.9 Medium2024-01-22
CVE-2023-27859 IBM Db2 code execution — Db2 for Linux, UNIX and Windows 6.5 Medium2024-01-22

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.