ibm

8,153 tracked vulnerabilities.

CVE-2025-2518 MEDIUM
IBM Db2 11.5.0-11.5.9 and 12.1.0-12.1.1 - Denial of Service via Specially Crafted Query
May 29, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-3357 CRITICAL
IBM Tivoli Monitoring <6.3.0.7-SP19 - RCE
May 28, 2025
CVSS 9.8
EPSS 0.01
CVE-2025-25029 MEDIUM
IBM Security Guardium 12.0 - Info Disclosure
May 28, 2025
CVSS 4.9
EPSS 0.00
CVE-2025-25026 MEDIUM
IBM Security Guardium 12.0 - Info Disclosure
May 28, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-25025 MEDIUM
IBM Security Guardium 12.0 - Info Disclosure
May 28, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-33079 MEDIUM
IBM Controller <11.1.0 - Info Disclosure
May 27, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-33138 MEDIUM
IBM Aspera Faspex 5.0.0-5.0.12 - HTML Injection
May 22, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-33137 HIGH
IBM Aspera Faspex <5.0.12 - Info Disclosure
May 22, 2025
CVSS 7.1
EPSS 0.00
CVE-2025-33136 HIGH
IBM Aspera Faspex <5.0.12 - Info Disclosure
May 22, 2025
CVSS 7.1
EPSS 0.00
CVE-2025-33103 HIGH
IBM TCP/IP Connectivity Utilities - Privilege Escalation
May 17, 2025
CVSS 8.5
EPSS 0.00
CVE-2025-1138 MEDIUM
IBM InfoSphere Information Server 11.7 - Info Disclosure
May 15, 2025
CVSS 4.3
EPSS 0.00
CVE-2025-3440 MEDIUM
IBM Security Guardium 11.5 - Stored Cross-Site Scripting
May 15, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-33104 MEDIUM
IBM WebSphere App Server <9.0 - XSS
May 14, 2025
CVSS 4.4
EPSS 0.00
CVE-2025-2900 HIGH
IBM Semeru Runtime <21.0.6.0 - DoS
May 14, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-3632 HIGH
IBM 4769 Developers Toolkit 7.0.0-7.5.52 - Denial of Service via Excessive Memory Allocation
May 12, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-1137 HIGH
IBM Storage Scale <5.2.2.1 - Privilege Escalation
May 10, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-1993 MEDIUM
IBM App Connect Enterprise Certified Container - Info Disclosure
May 09, 2025
CVSS 5.1
EPSS 0.00
CVE-2025-1331 HIGH
IBM CICS TX 10.1-11.1 - Local Code Execution via Unsafe gets Function
May 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-1330 HIGH
IBM CICS TX 10.1 and 11.1 - Out-of-bounds Write via gethostbyname DNS Handling
May 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-1329 HIGH
IBM CICS TX Standard 11.1 and CICS TX Advanced 10.1 and 11.1 - Out-of-bounds Write via gethostbyaddr DNS Handling
May 08, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-33093 HIGH
IBM Sterling Partner Engagement Manager <6.2.2 - Info Disclosure
May 07, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-3218 MEDIUM
IBM i 7.2-7.6 - Improper Certificate Validation in Netserver
May 07, 2025
CVSS 5.4
EPSS 0.00
CVE-2025-2898 HIGH
IBM Maximo Application Suite 9.0 - Privilege Escalation via RBAC Misconfiguration
May 06, 2025
CVSS 7.5
EPSS 0.00
CVE-2025-1493 MEDIUM
IBM Db2 12.1.0-12.1.1 - Authenticated Denial of Service via Race Condition
May 05, 2025
CVSS 5.3
EPSS 0.00
CVE-2025-1000 MEDIUM
IBM Db2 11.5.0-11.5.9 and 12.1.0-12.1.1 - Authenticated Denial of Service via Automatic Client Rerouting
May 05, 2025
CVSS 5.3
EPSS 0.00
Products
websphere_application_server 444 aix 393 db2 327 rational_quality_manager 202 sterling_b2b_integrator 195 infosphere_information_server 188 qradar_security_information_and_event_manager 187 maximo_asset_management 182 rational_doors_next_generation 153 rational_team_concert 142 rational_collaborative_lifecycle_management 141 rational_engineering_lifecycle_manager 141 websphere_portal 126 security_guardium 112 cognos_analytics 102 sterling_file_gateway 93 rational_rhapsody_design_manager 90 security_verify_access 90 websphere_mq 89 business_process_manager 88 lotus_domino 86 vios 85 rational_software_architect_design_manager 81 api_connect 79 lotus_notes 71 security_key_lifecycle_manager 70 db2_universal_database 66 concert 65 smartcloud_control_desk 65 urbancode_deploy 63
Quick Filters
Critical CVEs With Exploits In CISA KEV