IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-2987IBM Maximo Asset Management server-side request forgery
- CVE-2025-2950IBM i improper HTTP header neutralization
- CVE-2024-45651IBM Sterling Connect:Direct Web Services session fixation
- CVE-2024-49808IBM Sterling Connect:Direct Web Services improper authorization
- CVE-2025-2947IBM i privilege escalation
- CVE-2024-22314IBM Storage Defender - Resiliency Service information disclosure
- CVE-2022-43850IBM Aspera Console cross-site scripting
- CVE-2022-43840IBM Aspera Console XPath injection
- CVE-2022-43851IBM Aspera Console information disclosure
- CVE-2023-27272IBM Aspera Console weak password requirements
- CVE-2022-43852IBM Aspera Console information disclosure
- CVE-2022-43847IBM Aspera Console HTTP header injection
- CVE-2024-49825IBM Robotic Process Automation session fixation
- CVE-2025-3423IBM Aspera Faspex 5 cross-site scripting
- CVE-2024-51461IBM QRadar WinCollect Agent denial of service
- CVE-2023-43035IBM Sterling Control Center information disclosure
- CVE-2023-42007IBM Sterling Control Center cross-site scripting
- CVE-2023-43037IBM Maximo Application Suite improper access control
- CVE-2025-25023IBM Security Guardium information disclosure
- CVE-2023-33844IBM Security Verify Governance cross-site scripting
- CVE-2025-1095IBM Personal Communications command execution
- CVE-2025-1500IBM Maximo Application Suite file upload
- CVE-2024-56476IBM TXSeries for Multiplatforms information disclosure
- CVE-2024-56475IBM TXSeries for Multiplatforms cross-site scripting
- CVE-2024-56474IBM TXSeries for Multiplatforms cross-site request forgery
- CVE-2025-0154IBM TXSeries for Multiplatforms information disclosure
- CVE-2024-56341IBM Content Navigator cross-site scripting
- CVE-2024-25051IBM Jazz Reporting Service insufficient session expiration
- CVE-2024-55895IBM InfoSphere Information Server information disclosure
- CVE-2024-51477IBM InfoSphere Information Server information disclosure