Skip to content
OpenAdvisories

Vendor

IBM

6,555 known vulnerabilities.

Products

API Connect 287 AIX 217 i 213 WebSphere Application Server 188 DB2 for Linux, UNIX and Windows 182 Langflow OSS 177 InfoSphere Information Server 152 PowerVM VIOS 146 Sterling B2B Integrator 138 Rational Collaborative Lifecycle Management 131 Rational Quality Manager 126 MQ 117 QRadar SIEM 113 Security Guardium 106 Cognos Analytics 105 Guardium Data Protection 97 Rational DOORS Next Generation 96 Security Verify Access 93 Maximo Asset Management 86 WebSphere Application Server - Liberty 86 Rational Engineering Lifecycle Manager 76 Rational Team Concert 72 Sterling File Gateway 71 DataStage on Cloud Pak for Data 65 Security Verify Access Container 65 Concert 64 Verify Identity Access 59 Verify Identity Access Container 59 Security Key Lifecycle Manager 57 Db2 56 Cloud Pak for Security 55 Cognos Controller 52 Engineering Lifecycle Optimization 52 UrbanCode Deploy 52 Spectrum Protect Plus 49 Spectrum Scale 48 Engineering Workflow Management 48 Rational Rhapsody Design Manager 47 Financial Transaction Manager (FTM) for RedHat OpenShift 46 Robotic Process Automation 45
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-110200 Public exploit

    Langflow OSS is affected by multiple vulnerabilities

    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to cleartext storage of sensitive information.

    IBM Langflow OSS
  • Medium 6.5
    CVE-2025-36001 Public exploit

    IBM Db2 Denial of Service

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5.0 - 11.5.9 and 12.1.0 - 12.1.3 could allow an authenticated user to cause a denial of service using a specially crafted SQL statement including XML that performs uncontrolled recursion.

    IBM DB2 for Linux, UNIX and Windows Linux Windows
  • Medium 4.7
    CVE-2025-36041 Public exploit

    IBM MQ improper certificate validation

    IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the…

    IBM MQ Operator
  • Medium 5.4
    CVE-2024-51463 Public exploit

    IBM i server-side request forgery

    IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

    IBM i
  • Medium 4.3
    CVE-2024-51464 Public exploit

    IBM i authentication bypass

    IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions. By sending a specially crafted request, an authenticated attacker could exploit this vulnerability to remotely perform operations that the user is not allowed to perfor…

    IBM i
  • Medium 6.8
    CVE-2024-35133 Public exploit

    IBM Security Verify Access HTTP open redirect

    IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploi…

    IBM Security Verify Access Security Verify Access Docker
  • Medium 6.5
    CVE-2023-43040 Public exploit

    IBM Spectrum Fusion HCI improper access control

    IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.

    IBM Spectrum Fusion HCI ceph ceph Debian Ubuntu
  • Medium 5.4
    CVE-2024-28784 Public exploit

    IBM QRadar cross-site scripting

    IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-…

    IBM QRadar SIEM
  • Medium 5.1
    CVE-2024-22318 Public exploit

    IBM i Access Client Solutions information disclosure

    IBM i Access Client Solutions (ACS) 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.4 is vulnerable to NT LAN Manager (NTLM) hash disclosure by an attacker modifying UNC capable paths within ACS configuration files to point to a hostile server. If NTLM is enabl…

    IBM i Access Client Solutions
  • Medium 6.2
    CVE-2023-45184 Public exploit

    IBM i Access Client Solutions

    IBM i Access Client Solutions 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.3 could allow an attacker to obtain a decryption key due to improper authority checks. IBM X-Force ID: 268270.

    IBM i Access Client Solutions
  • Medium 6.7
    CVE-2020-5014 Public exploit

    IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary co…

    IBM DataPower Gateway
  • Medium 6.3
    CVE-2019-4650 Public exploit

    IBM Maximo Asset Management 7.6.1.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …

    IBM Maximo Asset Management
  • Medium 5.3
    CVE-2019-4061 Public exploit EPSS 23%

    IBM BigFix Platform 9.2 and 9.5 could allow an attacker to query the relay remotely and gather information about the up…

    IBM BigFix Platform
  • Medium 4.9
    CVE-2018-1932 Public exploit

    IBM API Connect 5.0.0.0 through 5.0.8.4 is affected by a vulnerability in the role-based access control in the manageme…

    IBM API Connect
  • Medium 5.4
    CVE-2018-1513 Public exploit

    IBM Sterling B2B Integrator Standard Edition 5.2.0 through 5.2.6 is vulnerable to cross-site scripting. This vulnerabil…

    IBM Sterling B2B Integrator
  • Medium 5.4
    CVE-2018-1563 Public exploit

    IBM Sterling B2B Integrator Standard Edition (IBM Sterling File Gateway 2.2.0 through 2.2.6) is vulnerable to cross-sit…

    IBM Sterling File Gateway
  • Medium 5.8
    CVE-2018-1612 Public exploit EPSS 56%

    IBM QRadar Incident Forensics (IBM QRadar SIEM 7.2, and 7.3) could allow a remote attacker to bypass authentication and…

    IBM QRadar SIEM