IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36236AIX Path Traversal
- CVE-2025-36250AIX Code Execution
- CVE-2025-36096AIX Insufficiently Protected Credentials
- CVE-2025-36251AIX Command Execution
- CVE-2025-33119IBM QRadar SIEM Information Disclosure
- CVE-2025-36223IBM OpenPages Host Header Injection
- CVE-2025-27368IBM OpenPages Information Disclosure
- CVE-2025-33150IBM Cognos Analytics Certified Containers information disclosure
- CVE-2025-36006IBM Db2 denial of service
- CVE-2025-36008IBM Db2 denial of service
- CVE-2025-36131IBM Db2 information disclosure
- CVE-2025-36136IBM denial of service
- CVE-2025-36185IBM Db2 denial of service
- CVE-2025-36186IBM Db2 privilege escalation
- CVE-2025-33012IBM Db2 improper account lockout
- CVE-2025-2534IBM Db2 denial of service
- CVE-2025-36135IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
- CVE-2024-47118IBM Db2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query
- CVE-2025-33110IBM OpenPages Vulnerable to HTML Injection
- CVE-2025-36054Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -
- CVE-2025-36172Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002
- CVE-2025-12531IBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerability
- CVE-2025-36093security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.
- CVE-2025-36092IBM Business Automation Insights improper input validation
- CVE-2025-36091IBM Business Automation Insights unverified ownership
- CVE-2025-36367IBM i is affected by a privilege escalation in IBM i SQL services
- CVE-2025-36249IBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSL
- CVE-2025-33003IBM InfoSphere Information Server is vulnerable to privilege escalation
- CVE-2025-3356IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations
- CVE-2025-3355IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations