IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36137IBM Sterling Connect:Direct for UNIX command execution
- CVE-2025-36386There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics
- CVE-2025-36085Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36083Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-36081Multiple Vulnerabilities in IBM Concert Software.
- CVE-2025-33133Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
- CVE-2025-33132Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
- CVE-2025-33131Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
- CVE-2025-33126Fixes to common vulnerabilities found in IBM Db2 High Performance Unload
- CVE-2025-36138IBM QRadar SIEM cross-site scripting
- CVE-2025-36170IBM QRadar SIEM cross-site scripting
- CVE-2025-36007IBM QRadar SIEM incorrect privilege assignment
- CVE-2025-36121HTML Injection Vulnerability in a Specific URL Endpoint of the IBM OpenPages Application
- CVE-2025-36361IBM App Connect Enterprise runtime is vulnerable to a lack of authorization on windows environments using IWA
- CVE-2025-36128IBM MQ denial of service
- CVE-2025-36002IBM Sterling B2B Integrator information disclosure
- CVE-2025-2529IBM Terracotta denial of service
- CVE-2025-27906IBM Content Navigator information disclosure
- CVE-2025-36087IBM Security Verify Access hard coded credentials
- CVE-2025-2138IBM Engineering Requirements Management Doors Next data modification
- CVE-2025-2139IBM Engineering Requirements Management Doors Next security bypass
- CVE-2025-2140IBM Engineering Requirements Management Doors Next spoofing
- CVE-2025-33096IBM Engineering Requirements Management Doors Next denial of service
- CVE-2025-36171IBM Aspera Faspex denial of service
- CVE-2025-36225IBM Aspera Faspex information disclosure
- CVE-2023-37401IBM Aspera Faspex cross-origin resource sharing
- CVE-2025-1826IBM Jazz Foundation cross-site scripting
- CVE-2025-36156IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution
- CVE-2025-36354IBM Security Verify Access command execution
- CVE-2025-36355IBM Security Verify Access code execution