IBM CVEs
6,555 CVEs and advisories name IBM as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-1403Qiskit SDK denial of service
- CVE-2024-45673IBM Security Verify Bridge information disclosure
- CVE-2025-0161IBM Security Verify Access Appliance code injection
- CVE-2024-49337IBM OpenPages HTML injection
- CVE-2024-49344IBM OpenPages session fixation
- CVE-2024-49779IBM OpenPages cross-site request forgery
- CVE-2024-49781IBM OpenPages XML external entity injection
- CVE-2024-49780IBM OpenPages path traversal
- CVE-2024-49782IBM OpenPages improper certificate validation
- CVE-2024-43196IBM OpenPages data manipulation
- CVE-2024-49355IBM OpenPages log manipulation
- CVE-2023-47160IBM Cognos Controller XML external entity injection
- CVE-2024-28777IBM Cognos Controller code execution
- CVE-2024-28776IBM Cognos Controller cross-site scripting
- CVE-2024-28780IBM Cognos Controller information disclosure
- CVE-2024-45081IBM Cognos Controller incorrect authorization
- CVE-2024-45084IBM Cognos Controller CSV injection
- CVE-2024-52902IBM Cognos Controller information disclosure
- CVE-2024-56463IBM QRadar SIEM cross-site scripting
- CVE-2024-56477IBM Power Hardware Management Console directory traversal
- CVE-2024-52895IBM i denial of service
- CVE-2024-55904IBM DevOps Deploy / IBM UrbanCode Deploy command injection
- CVE-2024-54176IBM UrbanCode Deploy missing authentication
- CVE-2025-0158IBM EntireX denial of service
- CVE-2024-56467IBM EntireX information disclosure
- CVE-2024-54171IBM EntireX XML external entity injection
- CVE-2024-52892IBM Jazz for Service Management Cross-Site Scripting
- CVE-2025-0799IBM App Connect Enterprise Arbitrary File Write
- CVE-2024-51450IBM Security Verify Directory Command Execution
- CVE-2024-49814IBM Security Verify Access Appliance Privilege Escalation