Skip to contentIbm I vulnerabilities
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.CVE-2025-360656.3 Medium
- ibm sterling connect:express adapter for sterling b2b integrator 5.2.0, sterling connect\ +1 moreMultiple vulnerabilities were addressed in IBM Sterling Connect:Express for UNIX.CVE-2025-360636.3 Medium
- ibm business automation workflow containers, business automation workflow +1 moreMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025CVE-2025-360585.5 Medium
- ibm business automation workflow containers, business automation workflow +1 moreMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 2025CVE-2025-360594.7 Medium
- ibm sterling connect:direct for unix containerIBM Sterling Connect:Direct for UNIX Container is affected by vulnerability where hard-coded credentials are embeeded in the product for its internal use.CVE-2025-141158.4 High
- ibm licensing operatorLicense Service: Privilege escalation vulnerabilityCVE-2025-129858.4 High
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via crafted xml catalogsCVE-2026-0992Fix available2.9 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: unbounded relaxng include recursion leading to stack overflowCVE-2026-0989Fix available3.7 Low
- xmlsoft libxml2, ibm aix, vios +11 more +13 moreLibxml2: libxml2: denial of service via uncontrolled recursion in xml catalog processingCVE-2026-0990Fix available5.9 Medium
- ibm ds8900f ( r9.4), ds8a00 ( r10.0), ds8a00( r10.1) +2 more +4 moreMissing Authorization with the DS8900F and DS8A00 Hardware Management ConsoleCVE-2025-361926.7 Medium
- ibm db2 intelligence centerClient-Side Enforcement of Server-Side Security in IBM Db2 Intelligence CenterCVE-2025-146874.3 Medium
- ibm api connectAuthentication bypass in IBM API ConnectCVE-2025-139159.8 Critical
- ibm devops deploy, ucd - ibm devops deploy +1 moreIBM DevOps Deploy is susceptible to a Cleartext Transmission of Sensitive InformationCVE-2025-134895.9 Medium
- ibm devops deploy, ucd - ibm devops deploy +1 moreIBM DevOps Deploy is susceptible to a Insufficiently Protected Credentials vulnerabilityCVE-2025-141486.5 Medium
- ibm devops deploy, ucd - ibm devops deploy, ucd - ibm urbancode deploy +1 more +3 moreIBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an Insufficient Session Expiration vulnerabilityCVE-2025-363605.0 Medium
- ibm planning analytics localIBM Planning Analytics Local is vulnerable to disclosing sensitive informationCVE-2025-364374.3 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM is affected by an information disclosure vulnerabilityCVE-2024-564642.7 Low
- ibm websphere application server, websphere application server liberty +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty Cross-Site ScriptingCVE-2025-126355.4 Medium
- ibm storage defender - resiliency service, storage defender resiliency service +1 moreIBM Storage Defender - Resiliency Service Information DisclosureCVE-2025-646506.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server Server-Side Request ForgeryCVE-2025-128324.6 Medium
- ibm informix dynamic serverIBM Informix Dynamic Server Authentication BypassCVE-2024-456758.4 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureCVE-2025-361343.7 Low
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosureCVE-2025-361125.3 Medium
- ibm concert, concert software +1 moreIBM Concert Software clickjackingCVE-2025-361496.3 Medium
- ibm webmethods integrationIBM webMethods Integration DeserializationCVE-2025-360728.8 High
- ibm iIBM i Information DisclosureCVE-2025-363716.5 Medium
- ibm storage virtualizeIBM Storage Virtualize Information DisclosureCVE-2025-361187.5 High
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Information DisclosureCVE-2025-362994.3 Medium
- ibm planning analytics local, planning analytics workspace +1 moreIBM Planning Analytics Local Directory TraversalCVE-2025-363578.0 High
- ibm aix, vios +1 moreAIX Path TraversalCVE-2025-362368.2 High
- ibm aix, vios +1 moreAIX Code ExecutionCVE-2025-3625010.0 Critical
- ibm aix, vios +1 moreAIX Insufficiently Protected CredentialsCVE-2025-360969.0 Critical
- ibm aix, vios +1 moreAIX Command ExecutionCVE-2025-362519.6 Critical
- ibm qradar security information and event management, qradar security information and event manager +1 moreIBM QRadar SIEM Information DisclosureCVE-2025-331196.5 Medium
- ibm cognos analytics certified containersIBM Cognos Analytics Certified Containers information disclosureCVE-2025-331505.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site ScriptingCVE-2025-361355.4 Medium
- ibm business automation workflow containers, business automation workflow traditional with process federation server, business automation workflow +1 more +3 moreCross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -CVE-2025-360546.1 Medium
- ibm cloud pak for business automationMultiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for 24.0.0-IF007, 24.0.1-IF005 and 25.0.0-IF002CVE-2025-361726.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerabilityCVE-2025-125317.1 High
- ibm cloud pak for business automationsecurity vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2025.CVE-2025-360934.8 Medium
- ibm cloud pak for business automationIBM Business Automation Insights improper input validationCVE-2025-360926.5 Medium
- ibm cloud pak for business automationIBM Business Automation Insights unverified ownershipCVE-2025-360914.3 Medium
- ibm iIBM i is affected by a privilege escalation in IBM i SQL servicesCVE-2025-363678.8 High
- ibm jazz for service managementIBM Jazz for Service Management is vulnerable to "filter" cookie not sent over SSLCVE-2025-362493.7 Low
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to privilege escalationCVE-2025-330037.8 High
- ibm tivoli monitoringIBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operationsCVE-2025-33568.6 High
- ibm tivoli monitoringIBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operationsCVE-2025-33557.5 High
- ibm sterling connect:direct for unix, sterling connect\ +1 moreIBM Sterling Connect:Direct for UNIX command executionCVE-2025-361377.2 High
- ibm maximo application suiteThere is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos AnalyticsCVE-2025-363869.8 Critical
- x.org x server, debian linux, ibm aix +25 more +27 moreXorg: xmayland: value overflow in xkbsetcompatmap()CVE-2025-62231Fix available7.3 High
- Show moreLoading…