IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-25019IBM QRadar Suite Software and IBM Cloud Pak for Security session fixation
- CVE-2024-45655IBM Application Gateway incorrect permission assignment
- CVE-2025-33005IBM Planning Analytics Local session fixation
- CVE-2025-33004IBM Planning Analytics Local path traversal
- CVE-2025-2896IBM Planning Analytics Local cross-site scripting
- CVE-2025-25044IBM Planning Analytics Local cross-site scripting
- CVE-2025-1499IBM InfoSphere Information Server information disclosure
- CVE-2024-49350IBM Db2 denial of service
- CVE-2025-2518IBM Db2 denial of service
- CVE-2025-3050IBM Db2 denial of service
- CVE-2024-51453IBM Sterling Secure Proxy directory traversal
- CVE-2024-38341IBM Sterling Secure Proxy information disclosure
- CVE-2025-3357IBM Tivoli Monitoring code execution
- CVE-2025-25029IBM Security Guardium information disclosure
- CVE-2025-25026IBM Security Guardium information disclosure
- CVE-2025-25025IBM Security Guardium information disclosure
- CVE-2024-45094IBM DS8900F and DS8A00 Hardware Management Console (HMC) cross-site scripting
- CVE-2025-33079IBM Controller information disclosure
- CVE-2025-33138IBM Aspera Faspex HTML injection
- CVE-2025-33137IBM Aspera Faspex data modification
- CVE-2025-33136IBM Aspera Faspex data modification
- CVE-2024-45641IBM Security ReaQta improper certificate validation
- CVE-2023-33861IBM Security ReaQta improper certificate validation
- CVE-2025-33103IBM i privilege escalation
- CVE-2024-51475IBM Content Navigator HTML injection
- CVE-2025-1138IBM Information Server information disclosure
- CVE-2025-3440IBM Security Guardium cross-site scripting
- CVE-2025-33104IBM WebSphere Application Server cross
- CVE-2025-2900IBM Semeru Runtime denial of service
- CVE-2025-3632IBM 4769 Developers Toolkit denial of service