IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36410Multiple vulnerabilities found in IBM ApplinX.
- CVE-2025-36409Multiple vulnerabilities found in IBM ApplinX.
- CVE-2025-36408Multiple vulnerabilities found in IBM ApplinX.
- CVE-2025-36397Security vulnerabilities have been found in IBM Application Gateway
- CVE-2025-36396Security vulnerabilities have been found in IBM Application Gateway
- CVE-2025-36115Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
- CVE-2025-36113Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
- CVE-2025-36066Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
- CVE-2025-36065Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
- CVE-2025-36063Multiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.
- CVE-2025-36058Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
- CVE-2025-36059Multiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025
- CVE-2025-33015Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-1722Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-1719Multiple Vulnerabilities in IBM Concert Software
- CVE-2025-14115IBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.
- CVE-2025-13925Multiple vulnerabilities in IBM Aspera Console
- CVE-2025-12985License Service: Privilege escalation vulnerability
- CVE-2025-64645Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36230XSS in IBM Aspera Faspex
- CVE-2025-36229Exposure of Sensitive System Information to an Unauthorized Control Sphere in IBM Aspera Faspex
- CVE-2025-36228Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
- CVE-2025-36192Missing Authorization with the DS8900F and DS8A00 Hardware Management Console
- CVE-2025-14687Client-Side Enforcement of Server-Side Security in IBM Db2 Intelligence Center
- CVE-2025-13915Authentication bypass in IBM API Connect
- CVE-2025-12771IBM Concert Software Improper Restriction of Operations within the Bounds of a Memory Buffer.
- CVE-2025-1721BM Concert Software Improper Clearing of Heap Memory Before Release.
- CVE-2025-36154IBM Concert Software Cleartext Storage in a File or on Disk.
- CVE-2025-13489IBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive Information
- CVE-2025-14148IBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerability