Skip to contentIbm vulnerabilities
Products
Show 140 moreShow less
Newest
- ibm db2IBM® Db2® is vulnerable to credential exposure in db2diag when executing specific testcase bucketsCVE-2025-137555.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query involving multiple subqueriesCVE-2026-15776.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service with a specially crafted query when stmtheap is set to automaticCVE-2025-361226.5 Medium
- ibm db2IBM® Db2® is vulnerable to a denial of service when fetching from certain tables under specific configurationsCVE-2025-146885.3 Medium
- ibm iIBM i is affected by a privilege escalation vulnerability in Web Administration GUI []CVE-2026-23116.4 Medium
- ibm watsonx.dataInadequate Pod Communication Restrictions, affects watsonx.dataCVE-2025-361805.3 Medium
- ibm turbonomic prometurbo agentIBM Turbonomic Prometurbo agent used by IBM Turbonomic Application Resource Management is affected by a single vulnerabilityCVE-2026-63898.8 High
- ibm langflow oss, langflow +1 moreMonitor API allows cross-user read of transaction logs and deletion of build data via flow_idCVE-2026-65426.5 Medium
- ibm watsonx.data, watsonx.data intelligence +1 moreVulnerabilities foundCVE-2025-363356.2 Medium
- ibm langflow desktop, langflow desktop +1 moreAuthenticated Remote Code Execution Vulnerability in Langflow Code Validation EndpointCVE-2026-65438.8 High
- ibm langflow desktop, langflow desktop +1 morePath Traversal and Arbitrary File Write Vulnerability in IBM Langflow Desktop API v2 File Upload EndpointCVE-2026-33456.5 Medium
- ibm langflow desktop, langflow desktop +1 moreStored Cross-Site Scripting (XSS) in Langflow Markdown Rendering via rehypeRawCVE-2026-33466.4 Medium
- ibm langflow desktop, langflow desktop +1 moreServer-Side Request Forgery (SSRF) in Langflow URL ComponentCVE-2026-33406.5 Medium
- ibm langflow desktop, langflow desktop +1 moreArbitrary File Write and Remote Code Execution Vulnerability in Langflow v2 APICVE-2026-45026.5 Medium
- ibm langflow desktop, langflow desktop +1 moreUnauthenticated Insecure Direct Object Reference (IDOR) Vulnerability in Langflow Desktop Image Download EndpointCVE-2026-45037.5 High
- xmlsoft libxml2, ibm aix, vios +10 more +12 moreLibxml2: libxml2: denial of service via crafted xsd-validated documentCVE-2026-6732Fix available6.5 Medium
- ibm guardium key lifecycle managerMultiple Vulnerabilities in IBM Guardium Key Lifecycle ManagerCVE-2026-17264.8 Medium
- ibm security verify directory (container), security verify directory +1 moreSecurity vulnerability has been detected in IBM Security Verify DirectoryCVE-2025-360745.5 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-59266.5 Medium
- ibm db2IBM® Db2® is vulnerable to a trap or return SQLCODE -901 when compiling a specially crafted query with a defined indexCVE-2026-13526.5 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilitiesCVE-2026-12722.7 Low
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilitiesCVE-2026-12744.9 Medium
- ibm total storage service console (tssc) / ts4500 imc, total storage service console, ts4500 imc +2 moreTSSC/IMC is vulnerable to OS Command InjectionCVE-2026-59357.3 High
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilitiesCVE-2026-49174.9 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilitiesCVE-2026-49185.5 Medium
- ibm guardium data protectionIBM Guardium Data Protection is affected by multiple vulnerabilitiesCVE-2026-49194.8 Medium
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty is affected by identity spoofingCVE-2026-36217.5 High
- ibm tivoli netcool impact, tivoli netcool\/impact +1 moreMultiple Vulnerabilities affect IBM Tivoli Netcool ImpactCVE-2026-47888.4 High
- ibm langflow desktop, langflow +1 moreIBM Langflow Desktop FAISS Vector Store Remote Code Execution via malicious Pickle fileCVE-2026-33578.8 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-13469.3 Critical
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-13437.2 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-13428.5 High
- ibm concertMultiple Vulnerabilities in IBM Concert SoftwareCVE-2025-130446.2 Medium
- ibm content navigatorIBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerabilityCVE-2026-12435.4 Medium
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-664872.7 Low
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-664864.8 Medium
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-664855.4 Medium
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-664845.5 Medium
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-664836.3 Medium
- ibm datapower gateway 10.5.0, datapower gateway 10.6.0, datapower gateway 10.6cd +1 more +3 moreIBM DataPower Gateway vulnerable to CSRFCVE-2025-363756.5 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-24753.1 Low
- ibm maximo application suiteIBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flagCVE-2026-48204.3 Medium
- ibm datapower gateway 10.5.0, datapower gateway 10.6.0, datapower gateway 10.6cd +1 more +3 moreIncorrect administrative access control in IBM DataPower GatewayCVE-2025-363734.1 Medium
- ibm aspera sharesMultiple vulnerabilities have been addressed in IBM Aspera SharesCVE-2025-139165.9 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-14915.3 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-28625.3 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-13457.3 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-41018.1 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify AccessCVE-2026-43645.4 Medium
- ibm storage protect serverIBM Storage Protect Server is affected by a vulnerability that could allow authenticated users to access administrative metadata through the JSON-RPC endpoint .CVE-2025-138557.6 High
- Show moreLoading…