IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-36356IBM Security Verify Access privilege escalation
- CVE-2023-49886IBM Transformation Extender Advanced code execution
- CVE-2023-49883IBM Transformation Extender Advanced information disclosure
- CVE-2023-50300IBM Transformation Extender Advanced improper access control
- CVE-2023-49881IBM Transformation Extender Advanced session fixation
- CVE-2023-50301IBM Transformation Extender Advanced information disclosure
- CVE-2025-36262IBM Planning Analytics Local information disclosure
- CVE-2025-36132IBM Planning Analytics Local cross-site scripting
- CVE-2025-36245IBM InfoSphere Information Server command execution
- CVE-2025-36099IBM WebSphere Application Server denial of service
- CVE-2025-36351IBM License Metric Tool bypass security
- CVE-2025-36352IBM License Metric Tool cross-site scripting
- CVE-2025-36239IBM Storage TS4500 Library cross-site scripting
- CVE-2024-43192IBM Storage TS4500 Library cross-site request forgery
- CVE-2025-36144IBM watsonx.data information disclosure
- CVE-2025-36326IBM Controller information disclosure
- CVE-2025-36274IBM Aspera HTTP Gateway information disclosure
- CVE-2025-33116IBM Watson Studio on Cloud Pak for Data cross-site scripting
- CVE-2025-36064IBM Sterling Connect:Express for Microsoft Windows information disclosure
- CVE-2025-36037IBM webMethods Integration server-side request forgery
- CVE-2025-36202IBM webMethods Integration code execution
- CVE-2025-36248IBM Copy Services Manager cross-site scripting
- CVE-2025-36146IBM watsonx.data information disclosure
- CVE-2025-36143IBM watsonx.data command execution
- CVE-2025-36139IBM watsonx.data cross-site scripting
- CVE-2025-36244IBM AIX privilege escalation
- CVE-2025-36082IBM OpenPages information disclosure
- CVE-2025-0164IBM QRadar SIEM information disclosure
- CVE-2025-36035IBM PowerVM Hypervisor denial of service
- CVE-2025-36222IBM Fusion insecure default configuration