IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1137IBM Storage Scale command injection
- CVE-2025-1993IBM App Connect Enterprise Certified Container information disclosure
- CVE-2025-1331IBM CICS TX code execution
- CVE-2025-1330IBM CICS TX code execution
- CVE-2025-1329IBM CICS TX code execution
- CVE-2025-33093IBM Sterling Partner Engagement Manager information disclosure
- CVE-2025-3218IBM i improper certificate validation
- CVE-2025-2898IBM Maximo Application Suite privilege escalation
- CVE-2025-1493IBM Db2 denial of service
- CVE-2025-0915IBM Db2 denial of service
- CVE-2025-1000IBM Db2 denial of service
- CVE-2025-1992IBM Db2 denial of service
- CVE-2025-1838IBM Cloud Pak for Business Automation denial of service
- CVE-2025-1495IBM Business Automation Workflow missing authentication
- CVE-2024-41753IBM Cloud Pak for Business Automation cross-site scripting
- CVE-2024-55910IBM Concert Software server-side request forgery
- CVE-2024-55913IBM Concert Software path traversal
- CVE-2024-55912IBM Concert Software information disclosure
- CVE-2024-55909IBM Concert Software denial of service
- CVE-2024-52903IBM Db2 denial of service
- CVE-2025-1333IBM MQ Operator information disclosure
- CVE-2025-27365IBM MQ Operator denial of service
- CVE-2025-1551IBM Operational Decision Manager cross-site scripting
- CVE-2025-2986IBM Maximo Asset Management cross-site scripting
- CVE-2025-25046IBM InfoSphere Information Server information disclosure
- CVE-2025-25045IBM InfoSphere Information Server information disclosure
- CVE-2024-22351IBM InfoSphere Information Server session fixation
- CVE-2025-27907IBM WebSphere Application Server server-side request forgery
- CVE-2025-1951IBM Hardware Management Console - Power Systems command execution
- CVE-2025-1950IBM Hardware Management Console - Power Systems command execution