IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-1272IBM Guardium Data Protection is affected by multiple vulnerabilities
- CVE-2026-1274IBM Guardium Data Protection is affected by multiple vulnerabilities
- CVE-2026-5935TSSC/IMC is vulnerable to OS Command Injection
- CVE-2026-4917IBM Guardium Data Protection is affected by multiple vulnerabilities
- CVE-2026-4918IBM Guardium Data Protection is affected by multiple vulnerabilities
- CVE-2026-4919IBM Guardium Data Protection is affected by multiple vulnerabilities
- CVE-2026-3621IBM WebSphere Application Server Liberty is affected by identity spoofing
- CVE-2026-4788Multiple Vulnerabilities affect IBM Tivoli Netcool Impact
- CVE-2026-3357IBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle file
- CVE-2026-1346Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-1343Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-1342Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2025-13044Multiple Vulnerabilities in IBM Concert Software
- CVE-2026-1243IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability
- CVE-2025-66487Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2025-66486Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2025-66485Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2025-66484Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2025-66483Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2025-36375IBM DataPower Gateway vulnerable to CSRF
- CVE-2026-2475Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-4820IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag
- CVE-2025-36373Incorrect administrative access control in IBM DataPower Gateway
- CVE-2025-13916Multiple vulnerabilities have been addressed in IBM Aspera Shares
- CVE-2026-1491Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-2862Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-1345Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-4101Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-4364Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2025-13855IBM Storage Protect Server is affected by a vulnerability that could allow authenticated users to access administrative metadata through the JSON-RPC endpoint .