Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

IBM — Vulnerabilities & Security Advisories 4629

Browse all 4629 CVE security advisories affecting IBM. AI-powered Chinese analysis, POCs, and references for each vulnerability.

IBM operates as a multinational technology and consulting corporation, primarily providing enterprise software, hybrid cloud services, and artificial intelligence solutions. Its extensive portfolio, including the Red Hat OpenShift platform and Watson AI suite, creates a broad attack surface that has historically been associated with Remote Code Execution (RCE) vulnerabilities, particularly within web application frameworks and middleware. Cross-site scripting (XSS) and privilege escalation flaws also frequently appear in its legacy enterprise applications and containerized environments. While the company maintains robust security protocols, past incidents have included data breaches affecting customer information and supply chain compromises. The high volume of recorded Common Vulnerabilities and Exposures (CVEs) reflects the complexity and scale of its global infrastructure rather than inherent systemic failure, though it necessitates rigorous patch management and continuous monitoring for enterprise clients relying on its diverse technological stack.

Top products by IBM: DB2 for Linux, UNIX and Windows InfoSphere Information Server Sterling B2B Integrator WebSphere Application Server Security Guardium QRadar SIEM Cognos Analytics MQ Maximo Asset Management API Connect Rational Quality Manager Rational Collaborative Lifecycle Management Security Key Lifecycle Manager i AIX Spectrum Protect Plus Robotic Process Automation Spectrum Scale UrbanCode Deploy Cognos Controller Aspera Faspex Sterling File Gateway Rational DOORS Next Generation Security Identity Governance and Intelligence Cloud Pak for Security Cloud Pak System Concert Financial Transaction Manager Content Navigator Jazz Reporting Service
CVE IDTitleCVSSSeverityPublished
CVE-2023-38276 IBM Cognos Dashboards information disclosure — Cognos Dashboards on Cloud Pak for DataCWE-319 5.9 Medium2023-10-22
CVE-2023-38275 IBM Cognos Dashboards information disclosure — Cognos Dashboards on Cloud Pak for DataCWE-319 5.9 Medium2023-10-22
CVE-2022-43891 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-209 2.7 Low2023-10-17
CVE-2022-43892 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-295 3.7 Low2023-10-17
CVE-2022-43893 IBM Security Verify Privilege denial of service — Security Verify PrivilegeCWE-400 2.7 Low2023-10-17
CVE-2022-43889 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-200 5.3 Medium2023-10-17
CVE-2021-29913 IBM Security Verify Privilege improper input validation — Security Verify PrivilegeCWE-20 6.5 Medium2023-10-17
CVE-2022-22380 IBM Security Verify Privilege improper authentication — Security Verify PrivilegeCWE-295 5.0 Medium2023-10-17
CVE-2022-22375 IBM Security Verify Privilege command execution — Security Verify PrivilegeCWE-434 7.2 High2023-10-17
CVE-2021-20581 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-613 5.3 Medium2023-10-17
CVE-2021-38859 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-200 4.3 Medium2023-10-17
CVE-2022-22385 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-319 5.9 Medium2023-10-17
CVE-2022-22386 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-311 5.3 Medium2023-10-17
CVE-2022-22384 IBM Security Verify Privilege improper input validation — Security Verify PrivilegeCWE-20 4.3 Medium2023-10-17
CVE-2022-22377 IBM Security Verify Privilege information disclosure — Security Verify PrivilegeCWE-311 5.3 Medium2023-10-17
CVE-2023-40373 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-38719 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.1 Medium2023-10-16
CVE-2023-40372 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-30991 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 7.5 High2023-10-16
CVE-2023-40374 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-38728 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-38740 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-38720 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-30987 IBM Db2 denial of service — Db2 for Linux, UNIX and WindowsCWE-20 5.3 Medium2023-10-16
CVE-2023-38280 IBM Power HMC privilege escalation — Power HMC 8.4 High2023-10-16
CVE-2023-40377 IBM i privilege escalation — iCWE-269 4.9 Medium2023-10-16
CVE-2023-33836 IBM Security Verify Governance information disclosure — Security Verify GovernanceCWE-798 5.3 Medium2023-10-16
CVE-2023-35018 IBM Security Verify Governance file upload — Security Verify GovernanceCWE-434 3.3 Low2023-10-15
CVE-2023-35013 IBM Security Verify Governance information disclosure — Security Verify GovernanceCWE-540 2.3 Low2023-10-15
CVE-2023-40378 IBM i privilege escalation — iCWE-269 4.9 Medium2023-10-15

This page lists every published CVE security advisory associated with IBM. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.