Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 4858

Browse all 4858 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE IDTitleCVSSSeverityPublished
CVE-2025-14289 IBM webMethods Integration Server is vulnerable to HTML injection — webMethods Integration ServerCWE-80 5.4 Medium2026-02-17
CVE-2025-27898 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-613 6.3 Medium2026-02-17
CVE-2025-27899 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-526 5.3 Medium2026-02-17
CVE-2025-27900 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-601 6.8 Medium2026-02-17
CVE-2025-27901 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-644 6.5 Medium2026-02-17
CVE-2025-27903 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-319 5.9 Medium2026-02-17
CVE-2025-27904 Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows — DB2 Recovery Expert for LUWCWE-352 6.5 Medium2026-02-17
CVE-2025-33130 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and WindowsCWE-120 6.5 Medium2026-02-17
CVE-2025-33124 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and WindowsCWE-131 6.5 Medium2026-02-17
CVE-2025-13108 Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows — DB2 Merge Backup for Linux, UNIX and Windows 5.5 Medium2026-02-17
CVE-2023-38265 Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ] — Cloud Pak SystemCWE-548 5.3 Medium2026-02-17
CVE-2025-33101 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-244 5.9 Medium2026-02-17
CVE-2025-33089 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-798 6.5 Medium2026-02-17
CVE-2025-36243 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-918 5.4 Medium2026-02-17
CVE-2024-43178 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-327 5.9 Medium2026-02-17
CVE-2025-36018 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-352 6.5 Medium2026-02-17
CVE-2025-36019 Multiple Vulnerabilities in IBM Concert Software. — ConcertCWE-79 6.1 Medium2026-02-17
CVE-2025-12755 Multiple vulnerabilities in IBM MQ Operator and Queue manager container images — MQ OperatorCWE-117 4.0 Medium2026-02-17
CVE-2025-36247 IBM Db2 XML External Entity Reference — Db2 for Linux, UNIX and WindowsCWE-611 7.1 High2026-02-17
CVE-2025-36425 IBM Db2 Information Disclosure — Db2 for Linux, UNIX and WindowsCWE-256 5.3 Medium2026-02-17
CVE-2025-13867 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-02-17
CVE-2025-14689 IBM Db2 Denial of Service — Db2 for Linux, UNIX and WindowsCWE-1284 6.5 Medium2026-02-17
CVE-2025-14150 IBM webMethods Integration Sever is affected by — webMethods Integration (on prem) - Integration ServerCWE-497 6.5 Medium2026-02-05
CVE-2025-13491 IBM App Connect Enterprise Certified Container Information Disclosure — App Connect Enterprise Certified ContainerCWE-426 5.1 Medium2026-02-05
CVE-2025-13379 A SQL Injection vulnerability has been addressed in IBM Aspera Console — Aspera ConsoleCWE-89 8.6 High2026-02-05
CVE-2024-51451 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-644 6.5 Medium2026-02-04
CVE-2024-43181 Multiple Vulnerabilities in IBM Concert Software — ConcertCWE-613 6.3 Medium2026-02-04
CVE-2024-40685 IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack — Operations Analytics - Log AnalysisCWE-352 4.3 Medium2026-02-04
CVE-2025-2134 IBM Jazz Reporting Service Denial of Service — Jazz Reporting ServiceCWE-410 3.5 Low2026-02-04
CVE-2025-27550 IBM Jazz Reporting Service Information Disclosure — Jazz Reporting ServiceCWE-497 3.5 Low2026-02-04

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.