Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top 10 Products IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPaused
CVE-2025-27900 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-601 6.8 Medium2026-02-17
CVE-2025-27901 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-644 6.5 Medium2026-02-17
CVE-2025-27903 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-319 5.9 Medium2026-02-17
CVE-2025-27904 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-352 6.5 Medium2026-02-17
CVE-2025-33130 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and WindowsCWE-120 6.5 Medium2026-02-17
CVE-2025-33124 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and WindowsCWE-131 6.5 Medium2026-02-17
CVE-2025-13108 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and Windows 5.5 Medium2026-02-17
CVE-2023-38265 Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ] — Cloud Pak SystemCWE-548 5.3 Medium2026-02-17
CVE-2025-33101 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-244 5.9 Medium2026-02-17
CVE-2025-33089 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-798 6.5 Medium2026-02-17
CVE-2025-36243 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-918 5.4 Medium2026-02-17
CVE-2024-43178 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-327 5.9 Medium2026-02-17
CVE-2025-36018 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-352 6.5 Medium2026-02-17
CVE-2025-36019 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-79 6.1 Medium2026-02-17
CVE-2025-12755 Multiple vulnerabilities in IBM MQ Operator and Queue manager container images — MQ OperatorCWE-117 4.0 Medium2026-02-17
CVE-2025-36247 IBM Db2 XML External Entity Reference — Db2 for Linux, UNIX and WindowsCWE-611 7.1 High2026-02-17
CVE-2025-36425 IBM Db2 Information Disclosure — Db2 for Linux, UNIX and WindowsCWE-256 5.3 Medium2026-02-17
CVE-2025-13867 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-02-17
CVE-2025-14689 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-02-17
CVE-2025-14150 IBM webMethods Integration Sever is affected by — webMethods Integration (on prem) - Integration ServerCWE-497 6.5 Medium2026-02-05
CVE-2025-13491 IBM App Connect Enterprise Certified Container Information Disclosure — App Connect Enterprise Certified ContainerCWE-426 5.1 Medium2026-02-05
CVE-2025-13379 A SQL Injection vulnerability has been addressed in IBM Aspera Console — Aspera ConsoleCWE-89 8.6 High2026-02-05
CVE-2024-51451 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-644 6.5 Medium2026-02-04
CVE-2024-43181 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-613 6.3 Medium2026-02-04
CVE-2024-40685 IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack — Operations Analytics - Log AnalysisCWE-352 4.3 Medium2026-02-04
CVE-2025-2134 IBM Jazz Reporting Service Denial of Service — Jazz Reporting ServiceCWE-410 3.5 Low2026-02-04
CVE-2025-27550 IBM Jazz Reporting Service Information Disclosure — Jazz Reporting ServiceCWE-497 3.5 Low2026-02-04
CVE-2025-1823 IBM Jazz Reporting Service Denial of Service — Jazz Reporting ServiceCWE-770 3.5 Low2026-02-04
CVE-2024-39724 IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API — Db2 Big SQL on Cloud Pak for DataCWE-770 5.3 Medium2026-02-04
CVE-2023-38281 Multiple Vulnerabilities in IBM Cloud Pak System — Cloud Pak SystemCWE-209 5.3 Medium2026-02-04

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.