IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36187Multiple Security vulnerabilities affecting IBM Knowledge Catalog Standard Cartridge
- CVE-2025-14684IBM Maximo Application Suite - Monitor Component uses Log Forging which is vulnerable to .
- CVE-2025-14807IBM InfoSphere Information Server is vulnerable to HTTP header injection
- CVE-2026-1015IBM InfoSphere Information Server is vulnerable to server-side request forgery
- CVE-2026-1014IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
- CVE-2026-2483IBM InfoSphere Information Server Cross-Site Scripting
- CVE-2025-64648Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-64647Multiple Vulnerabilities in IBM Concert Software
- CVE-2026-2484IBM InfoSphere Information Server Information Disclosure
- CVE-2025-64646Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-36440Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-36438Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-36422IBM InfoSphere Information Server is vulnerable to cross-site request forgery
- CVE-2025-36258IBM InfoSphere Information Server is vulnerable due to plaintext storage of a password
- CVE-2026-2485IBM InfoSphere Information Server Cross-Site Scripting
- CVE-2025-14974IBM InfoSphere Information Server is vulnerable due to Insecure Direct Object Reference
- CVE-2026-1262IBM InfoSphere Information Server Information Disclosure
- CVE-2025-14917IBM WebSphere Application Server Liberty could provide weaker than expected security
- CVE-2025-14912IBM InfoSphere Information Server is vulnerable to server-side request forgery
- CVE-2025-14915IBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerability
- CVE-2025-14810IBM InfoSphere Information Server is vulnerable due to insufficient session expiration
- CVE-2026-1561IBM WebSphere Application Server Liberty Server-Side Request Forgery
- CVE-2025-14808IBM InfoSphere Information Server is vulnerable due to disclosure of sensitive information
- CVE-2025-14790IBM InfoSphere Information Server is vulnerable to disclosure of sensitive information
- CVE-2025-12708Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-36051IBM QRadar SIEM Information Disclosure
- CVE-2025-13995IBM QRadar SIEM Information Disclosure
- CVE-2025-15051IBM QRadar SIEM Cross-Site Scripting
- CVE-2026-1276IBM QRadar SIEM Cross-Site Scripting
- CVE-2026-1264IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls