IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2022-38391IBM Spectrum Control information disclosure
- CVE-2022-39166IBM Security Guardium information disclosure
- CVE-2022-43382IBM AIX denial of service
- CVE-2022-46771IBM UrbanCode Deploy (UCD) cross-site scripting
- CVE-2022-43875IBM Financial Transaction Manager for SWIFT Services for Multiplatforms denial of service
- CVE-2022-43872IBM Financial Transaction Manager information disclosure
- CVE-2022-39160IBM Cognos Analytics cross-site scripting
- CVE-2022-43883IBM Cognos Analytics data manipulation
- CVE-2022-43887IBM Cognos Analytics information disclosure
- CVE-2022-38708IBM Cognos Analytics server-side request forgery
- CVE-2022-40607IBM Spectrum Scale directory traversal
- CVE-2020-4497IBM Spectrum Protect Plus information disclosure
- CVE-2022-41299IBM Cloud Transformation Advisor cross-site scripting
- CVE-2022-43581IBM Content Navigator code execution
- CVE-2022-41735IBM Business Process Manager cross-site scripting
- CVE-2022-43867IBM Spectrum Scale command execution
- CVE-2022-34361IBM Sterling Secure Proxy information disclosure
- CVE-2022-43901IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps information disclosure
- CVE-2022-43900IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps security bypass
- CVE-2022-41297IBM Db2U cross-site request forgery
- CVE-2022-41296IBM Db2U cross-site respect forgery
- CVE-2021-38997IBM API Connect HOST header injection
- CVE-2022-41732IBM Maximo information disclosure
- CVE-2022-40228IBM DataPower Gateway session fixation
- CVE-2022-40746IBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local authenticated attacker to execute arbitrary code on
- CVE-2022-22488IBM OpenBMC denial of service
- CVE-2022-38390Multiple IBM Business Automation Workflow versions are vulnerable to cross-site scripting.
- CVE-2022-40751IBM UrbanCode Deploy information disclosure
- CVE-2022-34354IBM Sterling Partner Engagement Manager information disclosure
- CVE-2022-40752IBM InfoSphere DataStage 11.7 is vulnerable to a command injection vulnerability due to improper neutralization of special elements.