Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2025-25020 IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation — QRadar Suite SoftwareCWE-1287 6.5 Medium2025-06-03
CVE-2025-1334 IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure — QRadar Suite SoftwareCWE-525 4.0 Medium2025-06-03
CVE-2025-25021 IBM QRadar Suite Software and IBM Cloud Pak for Security code injection — QRadar Suite SoftwareCWE-94 7.2 High2025-06-03
CVE-2025-25022 IBM QRadar Suite Software and IBM Cloud Pak for Security information disclosure — QRadar Suite SoftwareCWE-260 9.6 Critical2025-06-03
CVE-2025-25019 IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation — QRadar Suite SoftwareCWE-613 4.8 Medium2025-06-03
CVE-2024-45655 IBM Application Gateway incorrect permission assignment — Application GatewayCWE-732 5.5 Medium2025-06-03
CVE-2025-33005 IBM Planning Analytics Local session fixation — Planning Analytics LocalCWE-613 6.3 Medium2025-06-01
CVE-2025-33004 IBM Planning Analytics Local path traversal — Planning Analytics LocalCWE-22 6.5 Medium2025-06-01
CVE-2025-2896 IBM Planning Analytics Local cross-site scripting — Planning Analytics LocalCWE-79 4.8 Medium2025-06-01
CVE-2025-25044 IBM Planning Analytics Local cross-site scripting — Planning Analytics LocalCWE-79 5.4 Medium2025-06-01
CVE-2025-1499 IBM InfoSphere Information Server information disclosure — InfoSphere Information ServerCWE-312 6.5 Medium2025-06-01
CVE-2024-49350 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-121 6.5 Medium2025-05-29
CVE-2025-2518 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-789 5.3 Medium2025-05-29
CVE-2025-3050 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-770 5.3 Medium2025-05-29
CVE-2024-51453 IBM Sterling Secure Proxy directory traversal — Sterling Secure ProxyCWE-22 4.3 Medium2025-05-28
CVE-2024-38341 IBM Sterling Secure Proxy information disclosure — Sterling Secure ProxyCWE-328 5.9 Medium2025-05-28
CVE-2025-3357 IBM Tivoli Monitoring code execution — Tivoli MonitoringCWE-1285 9.8 Critical2025-05-28
CVE-2025-25029 IBM Security Guardium information disclosure — Security GuardiumCWE-116 4.9 Medium2025-05-28
CVE-2025-25026 IBM Security Guardium information disclosure — Security GuardiumCWE-863 4.3 Medium2025-05-28
CVE-2025-25025 IBM Security Guardium information disclosure — Security GuardiumCWE-209 4.3 Medium2025-05-28
CVE-2024-45094 IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting — Hardware Management ConsoleCWE-79 5.5 Medium2025-05-27
CVE-2025-33079 IBM Controller information disclosure — ControllerCWE-256 6.5 Medium2025-05-27
CVE-2025-33138 IBM Aspera Faspex HTML injection — Aspera FaspexCWE-80 5.4 Medium2025-05-22
CVE-2025-33137 IBM Aspera Faspex data modification — Aspera FaspexCWE-602 7.1 High2025-05-22
CVE-2025-33136 IBM Aspera Faspex data modification — Aspera FaspexCWE-471 7.1 High2025-05-22
CVE-2024-45641 IBM Security ReaQta improper certificate validation — Security ReaQta EDRCWE-295 6.5 Medium2025-05-20
CVE-2023-33861 IBM Security ReaQta improper certificate validation — Security ReaQta EDRCWE-295 6.5 Medium2025-05-20
CVE-2025-33103 IBM i privilege escalation — iCWE-250 8.5 High2025-05-17
CVE-2024-51475 IBM Content Navigator HTML injection — Content NavigatorCWE-80 5.4 Medium2025-05-16
CVE-2025-1138 IBM Information Server information disclosure — InfoSphere Information ServerCWE-548 4.3 Medium2025-05-15

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.