Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2022-43831 IBM Spectrum Scale privilege escalation — Storage Scale Container Native Storage Access 7.4 High2023-07-31
CVE-2023-35016 IBM Security Verify Governance path traversal — Security Verify Governance, Identity ManagerCWE-22 6.5 Medium2023-07-31
CVE-2023-35019 IBM Security Verify Governance command execution — Security Verify Governance, Identity ManagerCWE-78 7.2 High2023-07-31
CVE-2023-28530 IBM Cognos Analytics cross-site scripting — Cognos AnalyticsCWE-79 5.4 Medium2023-07-22
CVE-2023-25929 IBM Cognos Analytics cross-site scripting — Cognos AnalyticsCWE-79 4.6 Medium2023-07-22
CVE-2022-43910 IBM Security Guardium privilege escalation — Security Guardium 8.4 High2023-07-19
CVE-2022-43908 IBM Security Guardium denial of service — Security GuardiumCWE-20 4.3 Medium2023-07-19
CVE-2023-28513 IBM MQ denial of service — MQCWE-20 5.9 Medium2023-07-19
CVE-2023-26026 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure — Planning Analytics Cartridge for Cloud Pak for DataCWE-200 5.3 Medium2023-07-19
CVE-2023-26023 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure — Sterling Connect:Express for UNIXCWE-532 6.5 Medium2023-07-19
CVE-2023-27877 IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure — Planning Analytics Cartridge for Cloud Pak for DataCWE-200 5.3 Medium2023-07-19
CVE-2021-38933 IBM Sterling Connect:Express for UNIX information disclosure — Sterling Connect:Express for UNIXCWE-327 5.9 Medium2023-07-19
CVE-2023-29260 IBM Sterling Connect:Express for UNIX server-side request forgery — Sterling Connect:Express for UNIXCWE-918 6.5 Medium2023-07-19
CVE-2023-29259 IBM Sterling Connect:Express for UNIX information disclosure — Sterling Connect:Express for UNIX 3.7 Low2023-07-19
CVE-2023-35900 IBM Robotic Process Automation information disclosure — Robotic Process AutomationCWE-200 4.3 Medium2023-07-19
CVE-2023-33832 IBM Storage Protect denial of service — Storage ProtectCWE-20 6.2 Medium2023-07-19
CVE-2023-35898 IBM InfoSphere Information Server information disclosure — InfoSphere Information ServerCWE-200 4.3 Medium2023-07-19
CVE-2023-30433 IBM Security Verify Access HTTP open redirect — Security Verify Access DockerCWE-601 6.5 Medium2023-07-19
CVE-2023-35012 IBM Db2 code execution — Db2 for Linux, UNIX and WindowsCWE-121 6.7 Medium2023-07-17
CVE-2023-33857 IBM InfoSphere Information Server information disclosure — InfoSphere Information ServerCWE-200 5.3 Medium2023-07-16
CVE-2023-35901 IBM Robotic Process Automation security bypass — Robotic Process AutomationCWE-287 2.7 Low2023-07-16
CVE-2023-30989 IBM i privilege escalation — iCWE-269 8.4 High2023-07-16
CVE-2023-30988 IBM i privilege escalation — iCWE-269 8.4 High2023-07-16
CVE-2023-28955 IBM Watson Knowledge Catalog denial of service — Watson Knowledge Catalog on Cloud Pak for DataCWE-20 6.5 Medium2023-07-10
CVE-2023-28958 IBM Watson Knowledge Catalog CSV injection — Watson Knowledge Catalog on Cloud Pak for DataCWE-1236 7.0 High2023-07-10
CVE-2023-27540 IBM Watson CP4D Data Stores denial of service — Watson CP4D Data StoresCWE-770 5.9 Medium2023-07-10
CVE-2023-28953 IBM Cognos Analytics on Cloud Pak for Data improper access control — Cognos Analytics Cartridge for Cloud Pak for Data 3.1 Low2023-07-10
CVE-2023-30442 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.9 Medium2023-07-10
CVE-2023-30431 IBM Db2 buffer overflow — Db2 for Linux, UNIX and WindowsCWE-119 8.4 High2023-07-09
CVE-2023-23487 IBM Db2 audit logging — Db2 for Linux, UNIX and Windows 4.3 Medium2023-07-09

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.