Skip to contentIbm I vulnerabilities
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to server-side request forgeryCVE-2025-149125.4 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by a privilege escalation vulnerabilityCVE-2025-149156.5 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to insufficient session expirationCVE-2025-148106.3 Medium
- ibm websphere application server liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Server-Side Request ForgeryCVE-2026-15615.4 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to disclosure of sensitive informationCVE-2025-148083.1 Low
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to disclosure of sensitive informationCVE-2025-147906.5 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM Information DisclosureCVE-2025-360516.2 Medium
- ibm qradar, qradar security information and event manager +1 moreIBM QRadar SIEM Information DisclosureCVE-2025-139955.0 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM Cross-Site ScriptingCVE-2025-150515.4 Medium
- ibm qradar siem, qradar security information and event manager +1 moreIBM QRadar SIEM Cross-Site ScriptingCVE-2026-12765.4 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access ControlsCVE-2026-12647.1 High
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of ServiceCVE-2025-140317.5 High
- ibm iIBM i Denial of ServiceCVE-2026-13767.5 High
- ibm planning analytics localIBM Planning Analytics Information DisclosureCVE-2026-12676.5 Medium
- ibm planning analytics localIBM Planning Analytics Information DisclosureCVE-2025-148065.7 Medium
- ibm cics transaction gateway for multiplatforms, cics transaction gateway +1 moreIBM CICS Transaction Gateway for Multiplatforms Information DisclosureCVE-2026-09775.1 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway SQL InjectionCVE-2025-363686.5 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site ScriptingCVE-2023-406935.4 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Information DisclosureCVE-2025-144834.3 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site ScriptingCVE-2025-145045.4 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreIBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0...CVE-2026-08355.4 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Cross-Site ScriptingCVE-2025-137026.1 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information DisclosureCVE-2025-137183.7 Low
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information DisclosureCVE-2025-137235.3 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information DisclosureCVE-2025-137265.3 Medium
- ibm sterling partner engagement managerIBM Sterling Partner Engagement Manager Information DisclosureCVE-2025-148113.1 Low
- ibm trusteer rapport installer, trusteer rapport +1 moreIBM Trusteer Rapport installer affected by uncontrolled search path element vulnerabilityCVE-2026-27137.4 High
- ibm infosphere data architectInfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.CVE-2025-361736.1 Medium
- ibm planning analytics advanced certified containersIBM Planning Analytics Advanced Certified Containers is vulnerable to a sensitive information disclosure vulnerabilityCVE-2025-361054.4 Medium
- ibm mq applianceIBM MQ Appliance uses weaker than expected cryptographic algorithmsCVE-2025-144565.9 Medium
- ibm aspera faspio gatewayIBM Aspera faspio Gateway 1.3.7 has addressed a vulnerability affected by weak cryptographic algorithmsCVE-2025-144805.1 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is affected by an XML external entity injection (XXE) vulnerabilityCVE-2026-15677.1 High
- ibm app connect operator, app connect enterprise certified containers operands, app connect enterprisecertified containers operands +2 moreIBM App Connect Enterprise Certified Container IntegrationServer and IntegrationRuntime operands that report metrics are vulnerable to loss of confidentialityCVE-2025-134905.9 Medium
- ibm engineering requirements management doors nextIBM Engineering Requirements Management DOORS Next could allow an authenticated user to access and modify data beyond authorized permissionsCVE-2025-137345.4 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty could provide weaker than expected securityCVE-2025-149234.7 Medium
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable due to sensitive information written to a log fileCVE-2026-12654.3 Medium
- ibm webmethods api gateway (on-prem), webmethods api gateway +1 moreIBM webMethods API Management fails to validate user input and enables unauthorized arbitrary file readCVE-2026-26066.5 Medium
- ibm websphere application serverIBM WebSphere Application Server could provide weaker than expected securityCVE-2025-133334.4 Medium
- ibm financial transaction manager for ach services and check services for multi-platformIBM Financial Transaction Manager for ACH Services and Check Services is impacted by multiple vulnerabilitiesCVE-2025-331356.1 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreThe Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information DisclosureCVE-2025-363484.9 Medium
- ibm security qradar edrIBM Security QRadar EDR Software has multiple vulnerabilitiesCVE-2025-363766.3 Medium
- ibm qradar edr, security qradar edr +1 moreIBM Security QRadar EDR Software has multiple vulnerabilitiesCVE-2025-363776.3 Medium
- ibm qradar edr, security qradar edr +1 moreIBM Security QRadar EDR Software has multiple vulnerabilitiesCVE-2025-363795.9 Medium
- ibm webmethods integration serverIBM webMethods Integration Server is vulnerable to HTML injectionCVE-2025-142895.4 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-331306.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-331246.5 Medium
- ibm db2 merge backup for linux, unix and windows, db2 merge backup +1 moreFixes to common vulnerabilities found in IBM Db2 Merge Backup for Linux, UNIX and WindowsCVE-2025-131085.5 Medium
- ibm mq operator, supplied mq advanced container images +1 moreMultiple vulnerabilities in IBM MQ Operator and Queue manager container imagesCVE-2025-127554.0 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 XML External Entity ReferenceCVE-2025-362477.1 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Information DisclosureCVE-2025-364255.3 Medium
- Show moreLoading…