Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

IBM — Vulnerabilities & Security Advisories 4615

Browse all 4615 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Top 10 Products IBM:DB2 for Linux, UNIX and WindowsInfoSphere Information ServerSterling B2B IntegratorWebSphere Application ServerSecurity GuardiumQRadar SIEMCognos AnalyticsMQMaximo Asset ManagementAPI ConnectRational Quality ManagerRational Collaborative Lifecycle ManagementSecurity Key Lifecycle ManagerAIXiSpectrum Protect PlusSpectrum ScaleRobotic Process AutomationUrbanCode DeployCognos ControllerAspera FaspexSterling File GatewaySecurity Identity Governance and IntelligenceRational DOORS Next GenerationCloud Pak for SecurityConcertCloud Pak SystemFinancial Transaction ManagerContent NavigatorPlanning Analytics Local
CVE IDTitleCVSSSeverityPaused
CVE-2023-38017 Multiple Vulnerabilities in IBM Cloud Pak System — Cloud Pak SystemCWE-209 5.3 Medium2026-02-04
CVE-2025-13375 IBM Common Cryptographic Architecture Arbitrary Command Execution — Common Cryptographic ArchitectureCWE-250 9.8 Critical2026-02-04
CVE-2023-38010 Multiple Vulnerabilities in IBM Cloud Pak System — Cloud Pak SystemCWE-209 5.3 Medium2026-02-04
CVE-2025-33081 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-312 3.3 Low2026-02-03
CVE-2025-36033 IBM Engineering Lifecycle Management - Global Configuration Management is vulnerable to cross-site scripting — Engineering Lifecycle Management - Global Configuration ManagementCWE-79 5.4 Medium2026-02-03
CVE-2025-36094 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. — Cloud Pak for Business AutomationCWE-1284 5.4 Medium2026-02-03
CVE-2025-36194 This Power System update is being released to address — PowerVM HypervisorCWE-1262 2.8 Low2026-02-02
CVE-2025-36238 Power System Exposure of Sensitive System Information — PowerVM HypervisorCWE-497 6.0 Medium2026-02-02
CVE-2025-36253 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-759 5.9 Medium2026-02-02
CVE-2025-36436 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026. — Cloud Pak for Business AutomationCWE-79 6.4 Medium2026-02-02
CVE-2025-13096 XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow - — Business Automation Workflow containersCWE-918 7.1 High2026-02-02
CVE-2025-14914 IBM WebSphere Application Server Liberty Path Traversal — WebSphere Application Server LibertyCWE-22 7.6 High2026-02-02
CVE-2025-15395 IBM Jazz Foundation access control violation — Jazz FoundationCWE-863 4.3 Medium2026-02-02
CVE-2025-2668 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-789 6.5 Medium2026-01-30
CVE-2025-36001 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-674 6.5 Medium2026-01-30
CVE-2025-36009 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-01-30
CVE-2025-36070 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-770 6.5 Medium2026-01-30
CVE-2025-36098 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-770 6.5 Medium2026-01-30
CVE-2025-36123 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-770 6.2 Medium2026-01-30
CVE-2025-36184 IBM Db2 Privilege Escalation — Db2 for Linux, UNIX and WindowsCWE-250 7.2 High2026-01-30
CVE-2025-36353 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-943 6.2 Medium2026-01-30
CVE-2025-36365 IBM Db2 Privilege Escalation — Db2 for Linux, UNIX and WindowsCWE-639 6.8 Medium2026-01-30
CVE-2025-36366 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-943 6.5 Medium2026-01-30
CVE-2025-36384 IBM Db2 Privilege Escalation — Db2 for Linux, UNIX and WindowsCWE-428 8.4 High2026-01-30
CVE-2025-36387 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-770 6.5 Medium2026-01-30
CVE-2025-36407 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-01-30
CVE-2025-36423 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-01-30
CVE-2025-36424 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-01-30
CVE-2025-36427 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-01-30
CVE-2025-36428 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 5.3 Medium2026-01-30

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.