Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2022-43858 IBM Navigator for i information disclosure — Navigator for iCWE-22 4.3 Medium2022-12-22
CVE-2022-43857 IBM Navigator for i information disclosure — Navigator for iCWE-22 4.3 Medium2022-12-22
CVE-2022-22461 IBM Security Verify Governance, Identity Manager information disclosure — Security Verify Governance, Identity ManagerCWE-327 5.9 Medium2022-12-22
CVE-2022-35646 IBM Security Verify Governance, Identity Manager security bypass — Security Verify Governance, Identity ManagerCWE-287 5.9 Medium2022-12-22
CVE-2022-39166 IBM Security Guardium information disclosure — Security GuardiumCWE-200 4.4 Medium2022-12-20
CVE-2022-43382 IBM AIX denial of service — AIXCWE-399 6.2 Medium2022-12-20
CVE-2022-46771 IBM UrbanCode Deploy (UCD) cross-site scripting — UrbanCode Deploy (UCD)CWE-79 4.6 Medium2022-12-20
CVE-2022-43875 IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service — Financial Transaction Manager for SWIFT Services for MultiplatformsCWE-20 6.2 Medium2022-12-20
CVE-2022-43872 IBM Financial Transaction Manager information disclosure — Financial Transaction Manager 5.3 Medium2022-12-20
CVE-2022-39160 IBM Cognos Analytics cross-site scripting — Cognos AnalyticsCWE-79 6.1 Medium2022-12-19
CVE-2022-43883 IBM Cognos Analytics data manipulation — Cognos Analytics 6.5 Medium2022-12-19
CVE-2022-43887 IBM Cognos Analytics information disclosure — Cognos AnalyticsCWE-532 5.3 Medium2022-12-19
CVE-2022-38708 IBM Cognos Analytics server-side request forgery — Cognos AnalyticsCWE-918 6.5 Medium2022-12-19
CVE-2022-40607 IBM Spectrum Scale directory traversal — Spectrum ScaleCWE-22 6.8 Medium2022-12-19
CVE-2020-4497 IBM Spectrum Protect Plus information disclosure — Spectrum Protect PlusCWE-319 6.8 Medium2022-12-14
CVE-2022-41299 IBM Cloud Transformation Advisor cross-site scripting — Cloud Transformation AdvisorCWE-79 4.4 Medium2022-12-09
CVE-2022-43581 IBM Content Navigator code execution — Content NavigatorCWE-119 7.5 High2022-12-07
CVE-2022-41735 IBM Business Process Manager cross-site scripting — Business Process ManagerCWE-79 5.4 Medium2022-12-07
CVE-2022-43867 IBM Spectrum Scale command execution — Spectrum ScaleCWE-78 7.8 High2022-12-06
CVE-2022-34361 IBM Sterling Secure Proxy information disclosure — Sterling Secure ProxyCWE-327 5.9 Medium2022-12-06
CVE-2022-43901 IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure — WebSphere Automation for Cloud Pak for Watson AIOpsCWE-200 5.7 Medium2022-12-01
CVE-2022-41297 IBM Db2U cross-site request forgery — Db2UCWE-352 4.3 Medium2022-12-01
CVE-2022-41296 IBM Db2U cross-site respect forgery — Db2UCWE-352 6.5 Medium2022-12-01
CVE-2021-38997 IBM API Connect HOST header injection — API ConnectCWE-644 5.4 Medium2022-12-01
CVE-2022-41732 IBM Maximo information disclosure — Maximo MobileCWE-256 6.2 Medium2022-11-28
CVE-2022-40228 IBM DataPower Gateway session fixation — DataPower GatewayCWE-613 3.7 Low2022-11-22
CVE-2022-40746 IBM i 代码问题漏洞 — iCWE-77 7.2 High2022-11-21
CVE-2022-22488 IBM OpenBMC denial of service — OpenBMC 4.9 Medium2022-11-18
CVE-2022-38390 IBM Business Automation Workflow 跨站脚本漏洞 — Business Automation WorkflowCWE-79 5.4 Medium2022-11-17
CVE-2022-40751 IBM UrbanCode Deploy information disclosure — UrbanCode DeployCWE-522 4.9 Medium2022-11-17

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.