Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2022-43906 IBM Security Guardium information disclosure — Security Guardium 3.1 Low2023-10-04
CVE-2023-40376 IBM UrbanCode Deploy (UCD) improper authentication controls — UrbanCode DeployCWE-862 5.3 Medium2023-10-04
CVE-2023-40684 IBM Content Navigator cross-site scripting — Content NavigatorCWE-79 4.6 Medium2023-10-04
CVE-2023-37404 IBM Observability with Instana code execution — Observability with Instana 6.4 Medium2023-10-04
CVE-2023-35905 IBM FileNet Content Manager cross-site scripting — FileNet Content ManagerCWE-79 4.6 Medium2023-10-04
CVE-2022-22447 IBM Disconnected Log Collector information disclosure — Disconnected Log CollectorCWE-200 4.0 Medium2023-10-03
CVE-2023-40375 IBM i privilege escalation — iCWE-269 7.4 High2023-09-28
CVE-2023-43044 IBM License Metric Tool directory traversal — License Metric ToolCWE-22 5.3 Medium2023-09-28
CVE-2023-38718 IBM Robotic Process Automation information disclosure — Robotic Process AutomationCWE-200 3.7 Low2023-09-20
CVE-2023-37410 IBM Personal Communications privilege escalation — Person Communications 8.4 High2023-09-20
CVE-2023-40368 IBM Storage Protect information disclosure — Storage Protect ClientCWE-200 4.4 Medium2023-09-20
CVE-2022-22402 IBM Aspera Faspex cross-site scripting — Aspera FaspexCWE-79 5.4 Medium2023-09-08
CVE-2022-22401 IBM Aspera Faspex information disclosure — Aspera Faspex 5.9 Medium2023-09-08
CVE-2022-22409 IBM Aspera Faspex information disclosure — Aspera FaspexCWE-200 5.3 Medium2023-09-08
CVE-2023-30995 IBM Aspera Faspex improper access control — Aspera Faspex 7.5 High2023-09-08
CVE-2023-24965 IBM Aspera Faspex improper access control — Aspera Faspex 5.8 Medium2023-09-08
CVE-2022-22405 IBM Aspera Faspex information disclosure — Aspera FaspexCWE-311 5.9 Medium2023-09-08
CVE-2022-33164 IBM Security Directory Server path traversal — Security Directory IntegratorCWE-22 8.7 High2023-09-08
CVE-2023-32332 IBM Maximo Application Suite and IBM Maximo Asset Management HTML injection — Maximo Asset Management 5.4 Medium2023-09-08
CVE-2023-38736 IBM QRadar WinCollect Agent privilege escalation — QRadar WinCollect Agent 7.5 High2023-09-08
CVE-2023-35906 IBM Aspera Faspex security bypass — Aspera FaspexCWE-291 5.3 Medium2023-09-05
CVE-2023-22870 IBM Aspera Faspex information disclosure — Aspera FaspexCWE-319 5.9 Medium2023-09-05
CVE-2023-29261 IBM Sterling Secure Proxy information disclosure — Sterling Secure ProxyCWE-922 5.1 Medium2023-09-05
CVE-2023-32338 IBM Sterling Secure Proxy information disclosure — Sterling Secure Proxy 5.1 Medium2023-09-04
CVE-2022-43903 IBM Security Guardium denial of service — Security GuardiumCWE-20 4.3 Medium2023-09-04
CVE-2023-35892 IBM Financial Transaction Manager for SWIFT Services XML external entity injection — Financial Transaction Manager for SWIFT ServicesCWE-611 7.1 High2023-09-04
CVE-2023-33835 IBM Security Verify Information Queue information disclosure — Security Verify Information QueueCWE-209 4.3 Medium2023-08-31
CVE-2023-33834 IBM Security Verify Information Queue information disclosure — Security Verify Information QueueCWE-209 4.3 Medium2023-08-31
CVE-2023-33833 IBM Security Verify Information Queue information disclosure — Security Verify Information QueueCWE-311 2.9 Low2023-08-31
CVE-2023-24959 IBM InfoSphere Information Server information disclosure — InfoSphere Information ServerCWE-200 5.3 Medium2023-08-28

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.