IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-14480IBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithms
- CVE-2026-1567IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
- CVE-2026-1713IBM MQ is affected by an authority vulnerablility
- CVE-2025-13490IBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentiality
- CVE-2025-13616DataStage on Cloud Pak for Data is vulnerable to sensitive information leak due to HTTP response
- CVE-2025-13734IBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissions
- CVE-2025-14604The following vulnerabilities, which may affect IBM Storage Scale when a directory has a specific ACL composition and could lead to improper execute permissions, have been remediated in Storage Scale versions 5.2.3.6 and 6.0.0.2
- CVE-2025-14923IBM WebSphere Application Server Liberty could provide weaker than expected security
- CVE-2025-36363IBM DevOps Plan is vulnerable to Excessive Authentication Attempts
- CVE-2025-36364IBM DevOps Plan REST APIs are vulnerable to exposure of sensitive data through request query parameters.
- CVE-2026-1265IBM InfoSphere Information Server is vulnerable due to sensitive information written to a log file
- CVE-2026-2606IBM webMethods API Management fails to validate user input and enables unauthorized arbitrary file read
- CVE-2025-13333IBM WebSphere Application Server could provide weaker than expected security
- CVE-2025-13689DataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment
- CVE-2023-38005Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]
- CVE-2025-33135IBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilities
- CVE-2025-33088Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36183Privileged User File Upload Vulnerability Leading to Limited Server-Side Execution affects watsonx.data
- CVE-2025-36348The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
- CVE-2025-36376IBM Security QRadar EDR Software has multiple vulnerabilities
- CVE-2025-36377IBM Security QRadar EDR Software has multiple vulnerabilities
- CVE-2025-36379IBM Security QRadar EDR Software has multiple vulnerabilities
- CVE-2025-13691DataStage on Cloud Pak for Data is vulnerable to sensitive information leaks due to HTTP processing
- CVE-2025-14289IBM webMethods Integration Server is vulnerable to HTML injection
- CVE-2025-27898Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- CVE-2025-27899Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- CVE-2025-27900Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- CVE-2025-27901Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- CVE-2025-27903Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows
- CVE-2025-27904Multiple vulnerabilities in IBM Java SDK affecting Db2 Recovery Expert for Linux, Unix and Windows