Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Found 98 results / 5232 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-15995 IBM Cognos Analytics 12.1.3 general availability package contains a data integrity issue in the Agentic AI assistant that may cause incorrect report summaries or report-processing errors under concurrent use — Cognos Analytics CWE-362 5.4 Medium 2026-07-17
CVE-2025-3633 IBM Cognos Analytics is affected by multiple security vulnerabilities — Cognos Analytics CWE-79 5.4 Medium 2026-05-27
CVE-2025-36126 IBM Cognos Analytics is affected by Cross-site scripting. — Cognos Analytics CWE-79 6.4 Medium 2026-05-26
CVE-2024-52900 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.4 Medium 2025-06-28
CVE-2025-0923 IBM Cognos Analytics information disclosure — Cognos Analytics CWE-540 5.3 Medium 2025-06-11
CVE-2025-0917 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 5.5 Medium 2025-06-11
CVE-2025-25032 IBM Cognos Analytics denial of service — Cognos Analytics CWE-770 7.5 High 2025-06-11
CVE-2024-56340 IBM Cognos Analytics path traversal — Cognos Analytics CWE-23 6.5 Medium 2025-02-28
CVE-2025-0823 IBM MQ path traversal — Cognos Analytics CWE-22 6.5 Medium 2025-02-28
CVE-2024-49352 IBM Cognos Anaytics XML external entity injection — Cognos Analytics CWE-611 7.1 High 2025-02-05
CVE-2024-40695 IBM Cognos Analytics file upload — Cognos Analytics CWE-434 8.0 High 2024-12-20
CVE-2024-51466 IBM Cognos Analytics expression language injection — Cognos Analytics CWE-917 9.0 Critical 2024-12-20
CVE-2024-25042 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 5.4 Medium 2024-12-18
CVE-2024-45082 IBM Cognos Analytics HTTP open redirection — Cognos Analytics CWE-601 6.8 Medium 2024-12-18
CVE-2024-41752 IBM Cognos Analytics HTML injection — Cognos Analytics CWE-80 5.4 Medium 2024-12-18
CVE-2024-40703 IBM Cognos Analytics information disclosure — Cognos Analytics CWE-522 5.5 Medium 2024-09-22
CVE-2024-25041 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 5.4 Medium 2024-06-28
CVE-2024-25053 IBM Cognos Analytics improper certificate validation — Cognos Analytics CWE-295 5.9 Medium 2024-06-28
CVE-2024-25047 IBM Cognos Analytics log injection — Cognos Analytics CWE-117 8.6 High 2024-05-02
CVE-2023-43051 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 5.4 Medium 2024-02-24
CVE-2022-34357 IBM Cognos Analytics Mobile Server denial of service — Cognos Analytics CWE-770 6.5 Medium 2024-02-24
CVE-2023-30996 IBM Cognos Analytics cross-origin resource sharing — Cognos Analytics CWE-346 5.3 Medium 2024-02-24
CVE-2023-32344 IBM Cognos Analytics cross-site request forgery — Cognos Analytics CWE-352 4.3 Medium 2024-02-24
CVE-2023-38359 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.1 Medium 2024-02-24
CVE-2023-35011 IBM Cognos Analytics server-side request forgey — Cognos Analytics CWE-918 5.4 Medium 2023-08-16
CVE-2023-35009 IBM Cognos Analytics information disclosure — Cognos Analytics CWE-209 5.3 Medium 2023-08-16
CVE-2023-28530 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 5.4 Medium 2023-07-22
CVE-2023-25929 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 4.6 Medium 2023-07-22
CVE-2021-39036 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.1 Medium 2023-05-12
CVE-2022-39160 IBM Cognos Analytics cross-site scripting — Cognos Analytics CWE-79 6.1 Medium 2022-12-19

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.