Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 4858

Browse all 4858 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE IDTitleCVSSSeverityPublished
CVE-2025-14790 IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information — InfoSphere Information ServerCWE-522 6.5 Medium2026-03-25
CVE-2025-12708 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-798 6.2 Medium2026-03-25
CVE-2025-36051 IBM QRadar SIEM Information Disclosure — QRadar SIEMCWE-538 6.2 Medium2026-03-19
CVE-2025-13995 IBM QRadar SIEM Information Disclosure — QRadarCWE-1286 5.0 Medium2026-03-19
CVE-2025-15051 IBM QRadar SIEM Cross-Site Scripting — QRadar SIEMCWE-79 5.4 Medium2026-03-19
CVE-2026-1276 IBM QRadar SIEM Cross-Site Scripting — QRadar SIEMCWE-79 5.4 Medium2026-03-19
CVE-2026-1264 IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls — Sterling B2B IntegratorCWE-306 7.1 High2026-03-17
CVE-2025-14031 IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service — Sterling B2B IntegratorCWE-77 7.5 High2026-03-17
CVE-2026-3856 IBM Db2 Recovery Expert Missing Integrity Check — Db2 Recovery ExpertCWE-353 5.3 Medium2026-03-17
CVE-2026-1376 IBM i Denial of Service — iCWE-770 7.5 High2026-03-17
CVE-2026-1267 IBM Planning Analytics Information Disclosure — Planning Analytics LocalCWE-200 6.5 Medium2026-03-17
CVE-2025-14806 IBM Planning Analytics Information Disclosure — Planning Analytics LocalCWE-524 5.7 Medium2026-03-17
CVE-2026-0977 IBM CICS Transaction Gateway for Multiplatforms Information Disclosure — CICS Transaction Gateway for MultiplatformsCWE-284 5.1 Medium2026-03-13
CVE-2025-13212 IBM Aspera Console Denial of Service — Aspera ConsoleCWE-799 5.3 Medium2026-03-13
CVE-2025-13459 IBM Aspera Console Denial of Service — Aspera ConsoleCWE-841 2.7 Low2026-03-13
CVE-2025-13460 IBM Aspera Console Information Disclosure — Aspera ConsoleCWE-204 5.3 Medium2026-03-13
CVE-2025-36368 IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection — Sterling B2B IntegratorCWE-89 6.5 Medium2026-03-13
CVE-2023-40693 IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting — Sterling B2B IntegratorCWE-79 5.4 Medium2026-03-13
CVE-2025-14483 IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure — Sterling B2B IntegratorCWE-201 4.3 Medium2026-03-13
CVE-2025-14504 IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting — Sterling B2B IntegratorCWE-79 5.4 Medium2026-03-13
CVE-2026-0835 IBM Sterling B2B Integrator和IBM Sterling File Gateway 跨站脚本漏洞 — Sterling B2B IntegratorCWE-79 5.4 Medium2026-03-13
CVE-2025-13702 IBM Sterling Partner Engagement Manager Cross-Site Scripting — Sterling Partner Engagement Manager 6.1 Medium2026-03-13
CVE-2025-13718 IBM Sterling Partner Engagement Manager Information Disclosure — Sterling Partner Engagement ManagerCWE-319 3.7 Low2026-03-13
CVE-2025-13723 IBM Sterling Partner Engagement Manager Information Disclosure — Sterling Partner Engagement ManagerCWE-324 5.3 Medium2026-03-13
CVE-2025-13726 IBM Sterling Partner Engagement Manager Information Disclosure — Sterling Partner Engagement ManagerCWE-209 5.3 Medium2026-03-13
CVE-2025-14811 IBM Sterling Partner Engagement Manager Information Disclosure — Sterling Partner Engagement ManagerCWE-598 3.1 Low2026-03-13
CVE-2025-13213 Multiple vulnerabilities in IBM Aspera Orchestrator — Aspera OrchestratorCWE-644 5.4 Medium2026-03-10
CVE-2025-13219 Multiple vulnerabilities in IBM Aspera Orchestrator — Aspera OrchestratorCWE-598 5.9 Medium2026-03-10
CVE-2025-36226 Multiple vulnerabilities in IBM Aspera Faspex — Aspera Faspex 5CWE-79 5.4 Medium2026-03-10
CVE-2025-36227 Multiple vulnerabilities in IBM Aspera Faspex — Aspera Faspex 5CWE-644 5.4 Medium2026-03-10

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.