IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36033IBM Engineering Lifecycle Management - Global Configuration Management is vulnerable to cross-site scripting
- CVE-2025-36094Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
- CVE-2025-36194This Power System update is being released to address
- CVE-2025-36238Power System Exposure of Sensitive System Information
- CVE-2025-36253Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36436Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2026.
- CVE-2025-13096XML eXternal Entity injection (XXE) vulnerability affect IBM Business Automation Workflow -
- CVE-2025-14914IBM WebSphere Application Server Liberty Path Traversal
- CVE-2025-15395IBM Jazz Foundation access control violation
- CVE-2025-2668IBM Db2 Denial of Service
- CVE-2025-36001IBM Db2 Denial of Service
- CVE-2025-36009IBM Db2 Denial of Service
- CVE-2025-36070IBM Db2 Denial of Service
- CVE-2025-36098IBM Db2 Denial of Service
- CVE-2025-36123IBM Db2 Denial of Service
- CVE-2025-36184IBM Db2 Privilege Escalation
- CVE-2025-36353IBM Db2 Denial of Service
- CVE-2025-36365IBM Db2 Privilege Escalation
- CVE-2025-36366IBM Db2 Denial of Service
- CVE-2025-36384IBM Db2 Privilege Escalation
- CVE-2025-36387IBM Db2 Denial of Service
- CVE-2025-36407IBM Db2 Denial of Service
- CVE-2025-36423IBM Db2 Denial of Service
- CVE-2025-36424IBM Db2 Denial of Service
- CVE-2025-36427IBM Db2 Denial of Service
- CVE-2025-36428IBM Db2 Denial of Service
- CVE-2025-36442IBM Db2 Denial of Service
- CVE-2025-36419Multiple vulnerabilities found in IBM ApplinX.
- CVE-2025-36418Multiple vulnerabilities found in IBM ApplinX.
- CVE-2025-36411Multiple vulnerabilities found in IBM ApplinX.