IBM 厂商相关 6282 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
IBM 是全球领先的科技企业，核心业务涵盖混合云、人工智能及企业级软件服务。其软件生态庞大，历史漏洞多集中于远程代码执行、身份验证绕过及跨站脚本攻击，常因复杂配置或第三方组件引入风险。值得关注的是，IBM 定期发布安全公告并强化供应链审查，但部分遗留系统仍面临长期维护挑战。截至最新统计，已收录 4629 条 CVE，反映其广泛的市场渗透率与持续的安全审计需求。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-93879 | Hibernate Validator 表达式语言注入漏洞 — Hibernate Validator CWE-400 | 7.5 | High | 2026-11-08 |
| CVE-2026-93005 | IBM Process Mining 多个安全漏洞 — Process Mining CWE-770 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-8860 | IBM Verify Directory 多个漏洞 — Security Verify Directory CWE-650 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-8642 | IBM Verify Directory 多个漏洞 — Security Verify Directory CWE-200 | 4.3 | Medium | 2026-11-08 |
| CVE-2026-8640 | IBM Verify Directory 存在多个漏洞 — Security Verify Directory CWE-352 | 3.5 | Low | 2026-11-08 |
| CVE-2026-8639 | IBM Verify Directory 多个远程代码执行漏洞 — Security Verify Directory CWE-384 | 8.8 | High | 2026-11-08 |
| CVE-2026-84237 | IBM Guardium 数据保护组件存在多个漏洞。 — Guardium Data Protection CWE-22 | 3.1 | Low | 2026-11-08 |
| CVE-2026-84229 | IBM Guardium Data Protection 多个漏洞 — Guardium Data Protection CWE-352 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-84228 | IBM Guardium 数据保护多漏洞 — Guardium Data Protection CWE-20 | 3.1 | Low | 2026-11-08 |
| CVE-2026-84030 | IBM Guardium 多个漏洞 — Guardium Data Protection CWE-89 | 5.6 | Medium | 2026-11-08 |
| CVE-2026-82830 | IBM Guardium 数据保护 远程代码执行漏洞 — Guardium Data Protection CWE-88 | 6.7 | Medium | 2026-11-08 |
| CVE-2026-81542 | DataStage 远程代码执行漏洞 — DataStage on Cloud Pak for Data CWE-22 | 6.4 | Medium | 2026-11-08 |
| CVE-2026-81209 | IBM Sterling 日志敏感信息泄露漏洞 — Sterling B2B Integrator CWE-532 | 4.9 | Medium | 2026-11-08 |
| CVE-2026-80435 | Cloud Pak for Data 的 DataStage 存在多个漏洞 — DataStage on Cloud Pak for Data CWE-611 | 5.0 | Medium | 2026-11-08 |
| CVE-2026-78636 | IBM WebSphere Liberty 26.0.0.11 之前版本存在多个漏洞 — WebSphere Application Server - Liberty CWE-470 | 4.3 | Medium | 2026-11-08 |
| CVE-2026-78537 | IBM Guardium Key Lifecycle Manager 安全漏洞 — Guardium Key Lifecycle Manager CWE-327 | 6.8 | Medium | 2026-11-08 |
| CVE-2026-77153 | IBM i 主机打印机子系统缺少授权漏洞 — i CWE-862 | 4.8 | Medium | 2026-11-08 |
| CVE-2026-75879 | IBM Content Navigator 多个漏洞 — Content Navigator | 4.3 | Medium | 2026-11-08 |
| CVE-2026-6715 | IBM Concert 软件多个漏洞 — Concert CWE-78 | 9.8 | Critical | 2026-11-08 |
| CVE-2026-3684 | IBM Cloud Pak for Data 系统远程代码执行漏洞 — Cloud Pak for Data System CWE-266 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-2700 | IBM watsonx Orchestrate 多重漏洞 — watsonx Orchestrate Cartridge for Cloud Pak for Data CWE-284 | 4.3 | Medium | 2026-11-08 |
| CVE-2026-2477 | IBM watsonx Orchestrate 组件存在多个漏洞 — watsonx Orchestrate Cartridge for Cloud Pak for Data CWE-862 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-19307 | IBM Sterling B2B Integrator 和 File Gateway 授权不当漏洞 — Sterling B2B Integrator CWE-285 | 4.3 | Medium | 2026-11-08 |
| CVE-2026-19133 | TS4500 磁带库安全漏洞 — Storage TS4500 Library CWE-285 | 8.1 | High | 2026-11-08 |
| CVE-2026-18893 | CockroachDB PostgreSQL for IBM VPC 多个漏洞 — CockroachDB PostgreSQL for IBM VPC CWE-269 | 7.1 | High | 2026-11-08 |
| CVE-2026-18546 | CockroachDB PostgreSQL 多漏洞 — CockroachDB PostgreSQL for IBM VPC CWE-918 | 5.4 | Medium | 2026-11-08 |
| CVE-2026-18668 | IBM Sterling File Gateway 保护机制失效漏洞 — Sterling File Gateway CWE-693 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-18525 | IBM Sterling Secure Proxy 多漏洞 — Secure Proxy CWE-20 | 4.9 | Medium | 2026-11-08 |
| CVE-2026-18484 | IBM ContextForge MCP Gateway 拒绝服务漏洞 — ContextForge MCP Gateway CWE-706 | 6.5 | Medium | 2026-11-08 |
| CVE-2026-18196 | IBM App Connect Enterprise HTML 注入漏洞 — App Connect Enterprise CWE-79 | 5.4 | Medium | 2026-11-08 |
本页汇总了 IBM 厂商截至目前公开的全部 6282 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。