Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top products by IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPublished
CVE-2026-1345 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Verify Identity Access ContainerCWE-78 7.3 High2026-04-01
CVE-2026-4101 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Verify Identity Access ContainerCWE-287 8.1 High2026-04-01
CVE-2026-4364 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access — Verify Identity Access ContainerCWE-79 5.4 Medium2026-04-01
CVE-2025-13855 IBM Storage Protect Server is affected by a vulnerability that could allow authenticated users to access administrative metadata through the JSON-RPC endpoint . — Storage Protect ServerCWE-89 7.6 High2026-04-01
CVE-2025-36187 Multiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge — Knowledge Catalog Standard CartridgeCWE-532 4.4 Medium2026-03-25
CVE-2025-14684 IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to . — Maximo Application Suite - Monitor ComponentCWE-117 4.0 Medium2026-03-25
CVE-2025-14807 IBM InfoSphere Information Server is vulnerable to HTTP header injection — InfoSphere Information ServerCWE-644 6.5 Medium2026-03-25
CVE-2026-1015 IBM InfoSphere Information Server is vulnerable to server-side request forgery — InfoSphere Information ServerCWE-918 5.4 Medium2026-03-25
CVE-2026-1014 IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information — InfoSphere Information ServerCWE-319 6.5 Medium2026-03-25
CVE-2026-2483 IBM InfoSphere Information Server Cross-Site Scripting — InfoSphere Information ServerCWE-79 5.4 Medium2026-03-25
CVE-2025-64648 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-319 5.9 Medium2026-03-25
CVE-2025-64647 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-1240 5.9 Medium2026-03-25
CVE-2026-2484 IBM InfoSphere Information Server Information Disclosure — InfoSphere Information ServerCWE-209 4.3 Medium2026-03-25
CVE-2025-64646 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-14 6.2 Medium2026-03-25
CVE-2025-36440 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-522 5.1 Medium2026-03-25
CVE-2025-36438 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-923 5.1 Medium2026-03-25
CVE-2025-36422 IBM InfoSphere Information Server is vulnerable to cross-site request forgery — InfoSphere Information ServerCWE-352 4.3 Medium2026-03-25
CVE-2025-36258 IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password — InfoSphere Information ServerCWE-256 7.1 High2026-03-25
CVE-2026-2485 IBM InfoSphere Information Server Cross-Site Scripting — InfoSphere Information ServerCWE-79 4.8 Medium2026-03-25
CVE-2025-14974 IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference — InfoSphere Information ServerCWE-639 5.7 Medium2026-03-25
CVE-2026-1262 IBM InfoSphere Information Server Information Disclosure — InfoSphere Information ServerCWE-209 4.3 Medium2026-03-25
CVE-2025-14917 IBM WebSphere Application Server Liberty could provide weaker than expected security — WebSphere Application Server - LibertyCWE-1393 6.7 Medium2026-03-25
CVE-2025-14912 IBM InfoSphere Information Server is vulnerable to server-side request forgery — InfoSphere Information ServerCWE-918 5.4 Medium2026-03-25
CVE-2025-14915 IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability — WebSphere Application Server - LibertyCWE-200 6.5 Medium2026-03-25
CVE-2025-14810 IBM InfoSphere Information Server is vulnerable due to insufficient session expiration — InfoSphere Information ServerCWE-613 6.3 Medium2026-03-25
CVE-2026-1561 IBM WebSphere Application Server Liberty Server-Side Request Forgery — WebSphere Application Server LibertyCWE-918 5.4 Medium2026-03-25
CVE-2025-14808 IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information — InfoSphere Information ServerCWE-598 3.1 Low2026-03-25
CVE-2025-14790 IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information — InfoSphere Information ServerCWE-522 6.5 Medium2026-03-25
CVE-2025-12708 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-798 6.2 Medium2026-03-25
CVE-2025-36051 IBM QRadar SIEM Information Disclosure — QRadar SIEMCWE-538 6.2 Medium2026-03-19

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.