IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-14031IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service
- CVE-2026-3856IBM Db2 Recovery Expert Missing Integrity Check
- CVE-2026-1376IBM i Denial of Service
- CVE-2026-1267IBM Planning Analytics Information Disclosure
- CVE-2025-14806IBM Planning Analytics Information Disclosure
- CVE-2026-0977IBM CICS Transaction Gateway for Multiplatforms Information Disclosure
- CVE-2025-13212IBM Aspera Console Denial of Service
- CVE-2025-13459IBM Aspera Console Denial of Service
- CVE-2025-13460IBM Aspera Console Information Disclosure
- CVE-2025-36368IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
- CVE-2023-40693IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- CVE-2025-14483IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure
- CVE-2025-14504IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- CVE-2026-0835IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, a
- CVE-2025-13702IBM Sterling Partner Engagement Manager Cross-Site Scripting
- CVE-2025-13718IBM Sterling Partner Engagement Manager Information Disclosure
- CVE-2025-13723IBM Sterling Partner Engagement Manager Information Disclosure
- CVE-2025-13726IBM Sterling Partner Engagement Manager Information Disclosure
- CVE-2025-14811IBM Sterling Partner Engagement Manager Information Disclosure
- CVE-2025-13213Multiple vulnerabilities in IBM Aspera Orchestrator
- CVE-2025-13219Multiple vulnerabilities in IBM Aspera Orchestrator
- CVE-2025-36226Multiple vulnerabilities in IBM Aspera Faspex
- CVE-2025-36227Multiple vulnerabilities in IBM Aspera Faspex
- CVE-2026-2713IBM Trusteer Rapport installer affected by uncontrolled search path element vulnerability
- CVE-2025-36173InfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.
- CVE-2025-36105IBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerability
- CVE-2025-13686DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- CVE-2025-13687DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- CVE-2025-13688DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- CVE-2025-14456IBM MQ Appliance uses weaker than expected cryptographic algorithms