Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

IBM — Vulnerabilities & Security Advisories 4858

Browse all 4858 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

CVE IDTitleCVSSSeverityPublished
CVE-2025-2824 IBM Operational Decision Manager HTTP open redirect — Operational Decision ManagerCWE-601 7.4 High2025-08-01
CVE-2025-33118 IBM QRadar SIEM cross-site scripting — QRadar SIEMCWE-79 6.4 Medium2025-08-01
CVE-2025-36040 IBM Aspera Faspex session fixation — Aspera FaspexCWE-613 6.5 Medium2025-07-30
CVE-2025-36039 IBM Aspera Faspex bypass security — Aspera FaspexCWE-602 6.5 Medium2025-07-30
CVE-2024-49828 IBM Db2 for Linux, UNIX and Windows denial of service — Db2CWE-121 6.5 Medium2025-07-29
CVE-2024-51473 IBM Db2 for Linux, UNIX and Windows denial of service — Db2CWE-121 6.5 Medium2025-07-29
CVE-2024-52894 IBM Db2 for Linux, UNIX and Windows denial of service — Db2CWE-121 4.9 Medium2025-07-29
CVE-2025-33114 IBM Db2 for Linux denial of service — Db2CWE-943 5.3 Medium2025-07-29
CVE-2025-33092 IBM Db2 for Linux code execution — Db2CWE-121 7.8 High2025-07-29
CVE-2025-36071 IBM Db2 denial of service — IBM Db2CWE-772 6.5 Medium2025-07-29
CVE-2025-36010 IBM Db2 for Linux denial of service — Db2CWE-833 6.5 Medium2025-07-29
CVE-2025-2533 IBM Db2 for Linux denial of service — Db2CWE-789 5.3 Medium2025-07-29
CVE-2024-49343 IBM Informix Dynamic Server HTML injection — Informix Dynamic ServerCWE-80 5.4 Medium2025-07-28
CVE-2024-49342 IBM Informix Dynamic Server information disclosure — Informix Dynamic ServerCWE-307 7.5 High2025-07-28
CVE-2025-33109 IBM i privilege escalation — iCWE-250 7.5 High2025-07-24
CVE-2025-33013 IBM MQ Operator information disclosure — MQ OperatorCWE-244 6.2 Medium2025-07-24
CVE-2025-36005 IBM MQ Operator information disclosure — MQ OperatorCWE-295 5.9 Medium2025-07-24
CVE-2025-33077 IBM Engineering Systems Design Rhapsody code execution — Engineering Systems Design RhapsodyCWE-119 8.8 High2025-07-23
CVE-2025-33076 IBM Engineering Systems Design Rhapsody code execution — Engineering Systems Design RhapsodyCWE-119 8.8 High2025-07-23
CVE-2025-33020 IBM Engineering Systems Design Rhapsody information disclosure — Engineering Systems Design RhapsodyCWE-311 5.9 Medium2025-07-23
CVE-2025-36117 IBM Db2 Mirror for i session fixation — Db2 Mirror for iCWE-384 6.3 Medium2025-07-23
CVE-2025-36116 IBM Db2 Mirror for i cross-site websocket hijacking — Db2 Mirror for iCWE-1385 6.3 Medium2025-07-23
CVE-2024-41750 IBM SmartCloud Analytics - Log Analysis security bypass — SmartCloud Analytics Log AnalysisCWE-602 5.5 Medium2025-07-23
CVE-2024-40682 IBM SmartCloud Analytics - Log Analysis denial of service — SmartCloud Analytics Log AnalysisCWE-1287 6.2 Medium2025-07-23
CVE-2024-40686 IBM SmartCloud Analytics - Log Analysis HOST header injection — SmartCloud Analytics Log AnalysisCWE-644 5.4 Medium2025-07-23
CVE-2024-41751 IBM SmartCloud Analytics - Log Analysis security bypass — SmartCloud Analytics Log AnalysisCWE-602 5.5 Medium2025-07-23
CVE-2024-38335 IBM Security QRadar Network Threat Analytics denial of service — Security QRadar Network Threat AnalyticsCWE-770 4.5 Medium2025-07-22
CVE-2025-36057 IBM Cognos Analytics Mobile (iOS) authentication bypass — Cognos Analytics MobileCWE-299 5.2 Medium2025-07-21
CVE-2025-36062 IBM Cognos Analytics Mobile (iOS) information disclosure — Cognos Analytics MobileCWE-311 5.9 Medium2025-07-21
CVE-2025-36106 IBM Cognos Analytics Mobile (iOS) information disclosure — Cognos Analytics MobileCWE-326 6.5 Medium2025-07-21

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.