IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-33130Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
- CVE-2025-33124Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
- CVE-2025-13108Fixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and Windows
- CVE-2023-38265Improper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]
- CVE-2025-33101Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-33089Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36243Multiple Vulnerabilities in IBM Concert Software.
- CVE-2024-43178Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36018Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36019Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-12755Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
- CVE-2025-36247IBM Db2 XML External Entity Reference
- CVE-2025-36425IBM Db2 Information Disclosure
- CVE-2025-13867IBM Db2 Denial of Service
- CVE-2025-14689IBM Db2 Denial of Service
- CVE-2025-14150IBM webMethods Integration Sever is affected by
- CVE-2025-13491IBM App Connect Enterprise Certified Container Information Disclosure
- CVE-2025-13379A SQL Injection vulnerability has been addressed in IBM Aspera Console
- CVE-2024-51451Multiple Vulnerabilities in IBM Concert Software
- CVE-2024-43181Multiple Vulnerabilities in IBM Concert Software
- CVE-2024-40685IBM Operations Analytics - Log Analysis is affected by CSRF Token Replay Attack
- CVE-2025-2134IBM Jazz Reporting Service Denial of Service
- CVE-2025-27550IBM Jazz Reporting Service Information Disclosure
- CVE-2025-1823IBM Jazz Reporting Service Denial of Service
- CVE-2024-39724IBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API
- CVE-2023-38281Multiple Vulnerabilities in IBM Cloud Pak System
- CVE-2023-38017Multiple Vulnerabilities in IBM Cloud Pak System
- CVE-2025-13375IBM Common Cryptographic Architecture Arbitrary Command Execution
- CVE-2023-38010Multiple Vulnerabilities in IBM Cloud Pak System
- CVE-2025-33081Multiple Vulnerabilities in IBM Concert Software.