Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 5232

Browse all 5232 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Found 43 results / 5232 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2025-36326 IBM Controller information disclosure — Cognos Controller CWE-321 3.7 Low 2025-09-26
CVE-2022-39163 IBM Cognos Controller HTTP response smuggling — Cognos Controller CWE-444 4.7 Medium 2025-03-26
CVE-2023-47160 IBM Cognos Controller XML external entity injection — Cognos Controller CWE-611 8.2 High 2025-02-19
CVE-2024-28777 IBM Cognos Controller code execution — Cognos Controller CWE-502 8.8 High 2025-02-19
CVE-2024-28776 IBM Cognos Controller cross-site scripting — Cognos Controller CWE-79 5.4 Medium 2025-02-19
CVE-2024-28780 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2025-02-19
CVE-2024-45081 IBM Cognos Controller incorrect authorization — Cognos Controller CWE-863 6.5 Medium 2025-02-19
CVE-2024-45084 IBM Cognos Controller CSV injection — Cognos Controller CWE-1236 8.0 High 2025-02-19
CVE-2024-52902 IBM Cognos Controller information disclosure — Cognos Controller CWE-798 8.8 High 2025-02-19
CVE-2024-41775 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2024-12-03
CVE-2024-25020 IBM Cognos Controller file upload — Cognos Controller CWE-434 5.5 Medium 2024-12-03
CVE-2024-41776 IBM Cognos Controller cross-site request forgery — Cognos Controller CWE-352 6.5 Medium 2024-12-03
CVE-2024-41777 IBM Cognos Controller hard coded credentials — Cognos Controller CWE-798 7.5 High 2024-12-03
CVE-2024-45676 IBM Cognos Controller file upload — Cognos Controller CWE-351 4.3 Medium 2024-12-03
CVE-2024-25036 IBM Cognos Controller authentication bypass — Cognos Controller CWE-288 4.3 Medium 2024-12-03
CVE-2024-25035 IBM Cognos Controller information disclosure — Cognos Controller CWE-497 5.3 Medium 2024-12-03
CVE-2024-40691 IBM Cognos Controller file upload — Cognos Controller CWE-434 8.0 High 2024-12-03
CVE-2024-25019 IBM Cognos Controller file upload — Cognos Controller CWE-434 5.5 Medium 2024-12-03
CVE-2021-29892 IBM Cognos Controller information disclosure — Cognos Controller CWE-319 5.9 Medium 2024-12-03
CVE-2023-40695 IBM Cognos Controller session fixation — Cognos Controller CWE-613 6.3 Medium 2024-05-03
CVE-2021-20451 IBM Cognos Controller SQL injection — Cognos Controller CWE-89 6.0 Medium 2024-05-03
CVE-2022-22364 IBM Cognos Controller security bypass — Cognos Controller CWE-350 5.3 Medium 2024-05-03
CVE-2023-28952 IBM Cognos Controller log injection — Cognos Controller CWE-117 5.3 Medium 2024-05-03
CVE-2023-38724 IBM Cognos Controller SQL injection — Cognos Controller CWE-89 6.3 Medium 2024-05-03
CVE-2023-40696 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2024-05-03
CVE-2021-20556 IBM Cognos Controller information disclosure — Cognos Controller CWE-204 5.3 Medium 2024-05-03
CVE-2023-23474 IBM Cognos Controller information disclosure — Cognos Controller CWE-209 3.7 Low 2024-05-03
CVE-2021-20450 IBM Cognos Controller information disclosure — Cognos Controller 4.3 Medium 2024-05-03
CVE-2020-4874 IBM Cognos Controller information disclosure — Cognos Controller CWE-327 5.9 Medium 2024-05-03
CVE-2020-4879 IBM Cognos Controller 授权问题漏洞 — Cognos Controller 6.5 - 2022-01-21

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.