IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1142IBM Edge Application Manager server-side request forgery
- CVE-2025-1139IBM Edge Application Manager incorrect permissions
- CVE-2025-36114IBM QRadar SOAR Plugin App path traversal
- CVE-2025-2988IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- CVE-2025-33008IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- CVE-2025-33100IBM Concert Software information disclosure
- CVE-2025-33090IBM Concert Software denial of service
- CVE-2025-27909IBM Concert Software cross-origin resource sharing
- CVE-2025-1759IBM Concert Software information disclosure
- CVE-2024-49827IBM Concert Software information disclosure
- CVE-2025-36120IBM Storage Virtualize privilege escalation
- CVE-2025-36088IBM TS4500 cross-site scripting
- CVE-2025-33142IBM WebSphere Application Server information disclosure
- CVE-2025-36047IBM WebSphere Application Server Liberty denial of service
- CVE-2025-36000IBM WebSphere Application Server Liberty cross-site scripting
- CVE-2025-36124IBM WebSphere Application Server Liberty bypass security
- CVE-2025-36023IBM Cloud Pak for Business Automation security bypass
- CVE-2025-36119IBM i authentication bypass
- CVE-2024-56339IBM WebSphere Application Server information disclosure
- CVE-2025-36020IBM Guardium Data Protection information disclosure
- CVE-2025-3354IBM Tivoli Monitoring code execution
- CVE-2025-3320IBM Tivoli Monitoring code execution
- CVE-2024-52890IBM Engineering Lifecycle Optimization - Publishing cross-site scripting
- CVE-2025-2824IBM Operational Decision Manager HTTP open redirect
- CVE-2025-33118IBM QRadar SIEM cross-site scripting
- CVE-2025-36040IBM Aspera Faspex session fixation
- CVE-2025-36039IBM Aspera Faspex bypass security
- CVE-2024-49828IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2024-51473IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2024-52894IBM Db2 for Linux, UNIX and Windows denial of service