Browse CVEs

HIGH 7.4 CVE-2025-36093 IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an attacker to access unauthorized content or perform unauthorized actio… Cloud Pak For Business Automation Mitigation only Fix from $1,9502025-11-03 MEDIUM 6.5 CVE-2025-36092 IBM Cloud Pak For Business Automation 25.0.0, 24.0.1, and 24.0.0 could allow an authenticated user to cause a denial of service due to the improper v… Cloud Pak For Business Automation Mitigation only Fix from $1,6002025-11-03 HIGH 8.8 CVE-2025-36367 IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 is vulnerable to privilege escalation caused by an invalid IBM i SQL services authorization check. A malicious acto… I Mitigation only Fix from $1,9502025-11-01 HIGH 7.8 CVE-2025-33003 IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a non-root user to gain higher privileges/capabilities within the scope of a … Infosphere Information Server after 11.7.1.6 Fix from $1,9502025-10-31 MEDIUM 5.3 CVE-2025-36249 IBM Jazz for Service Management 1.1.3.0 through 1.1.3.25 does not set the secure attribute on authorization tokens or session cookies. Attackers may … Jazz For Service Management 1.1.3.26+ Fix from $1,6002025-10-31 CRITICAL 9.8 CVE-2025-3356 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could … Tivoli Monitoring Mitigation only Fix from $2,3002025-10-30 HIGH 7.5 CVE-2025-3355 IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 21 could allow a remote attacker to traverse directories on the system. An attacker could … Tivoli Monitoring Mitigation only Fix from $1,9502025-10-30 HIGH 7.2 CVE-2025-36137 IBM Sterling Connect Direct for Unix 6.2.0.7 through 6.2.0.9 iFix004, 6.4.0.0 through 6.4.0.2 iFix001, and 6.3.0.2 through 6.3.0.5 iFix002 incorrectl… Sterling Connect\ 6.2.0.9 / 6.3.0.5+ Fix from $1,9502025-10-30 CRITICAL 9.8 CVE-2025-36386 IBM Maximo Application Suite 9.0.0 through 9.0.15 and 9.1.0 through 9.1.4 could allow a remote attacker to bypass authentication mechanisms and gain … Maximo Application Suite after 9.1.4 Fix from $2,3002025-10-28 MEDIUM 5.5 CVE-2025-36083 IBM Concert Software 1.0.0 through 2.0.0 could allow a local user to obtain sensitive information from buffers due to improper clearing of heap mem… Concert 2.1.0+ Fix from $1,6002025-10-28 MEDIUM 5.4 CVE-2025-36085 IBM Concert 1.0.0 through 2.0.0 Software is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauth… Concert 2.1.0+ Fix from $1,6002025-10-28 MEDIUM 5.3 CVE-2025-36081 IBM Concert Software 1.0.0 through 2.0.0 could allow a user to modify system logs due to improper neutralization of log input. Concert 2.1.0+ Fix from $1,6002025-10-28 MEDIUM 6.5 CVE-2025-33131 IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the pro… Db2 High Performance Unload Load after 6.1.0.0 Fix from $1,6002025-10-28 MEDIUM 6.5 CVE-2025-33132 IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the pro… Db2 High Performance Unload Load after 6.1.0.0 Fix from $1,6002025-10-28 MEDIUM 6.5 CVE-2025-33133 IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, and 5.1 could allow an authenticated user to cause the pro… Db2 High Performance Unload Load after 6.1.0.0 Fix from $1,6002025-10-28 MEDIUM 6.5 CVE-2025-33126 IBM DB2 High Performance Unload 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1, 6.1, 5.1, 6.1.0.3, 5.1.0.1, 6.1.0.2, 6.5, 6.5.0.0 IF1, 6.1.0.1,… Db2 High Performance Unload Load after 6.1.0.0 Fix from $1,6002025-10-28 HIGH 7.8 CVE-2025-36007 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to privilege escalation due to improper privilege assignment to an … Qradar Security Information And Event Manager Mitigation only Fix from $1,9502025-10-27 MEDIUM 5.4 CVE-2025-36138 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authen… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-36170 IBM QRadar SIEM 7.5 through 7.5.0 Update Pack 13 Independent Fix 02 is vulnerable to stored cross-site scripting. This vulnerability allows an authen… Qradar Security Information And Event Manager Mitigation only Fix from $1,6002025-10-27 MEDIUM 5.4 CVE-2025-36121 IBM OpenPages 9.1 and 9.0 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, wou… Openpages Mitigation only Fix from $1,6002025-10-27 HIGH 8.8 CVE-2025-36361 IBM App Connect Enterprise 13.0.1.0 through 13.0.4.2, and 12.0.1.0 through 12.0.12.17 could allow an authenticated user to perform unauthorized actio… App Connect Enterprise after 13.0.4.2 Fix from $1,9502025-10-24 HIGH 7.5 CVE-2025-36128 IBM MQ 9.1, 9.2, 9.3, 9.4 LTS and 9.3, 9.4 CD is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read … Mq Mitigation only Fix from $1,9502025-10-16 MEDIUM 5.5 CVE-2025-36002 IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5, and 6.2.1.0 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5, and 6.2.1.0 stores user crede… Sterling B2b Integrator 6.2.0.5_1+ Fix from $1,6002025-10-16 MEDIUM 5.3 CVE-2025-27906 IBM Content Navigator 3.0.11, 3.0.15, 3.1.0, and 3.2.0 could expose the directory listing of the application upon using an application URL. Applicati… Content Navigator Mitigation only Fix from $1,6002025-10-14 CRITICAL 9.8 CVE-2025-36087 IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain confi… Security Verify Access after 10.0.9 Fix from $2,3002025-10-13 MEDIUM 6.5 CVE-2025-33096 IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user to cause a denial of service by uploading … Engineering Requirements Management Doors Next Mitigation only Fix from $1,6002025-10-12 MEDIUM 5.7 CVE-2025-2140 IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of … Engineering Requirements Management Doors Next Mitigation only Fix from $1,6002025-10-12 MEDIUM 5.3 CVE-2023-37401 IBM Aspera Faspex 5.0.0 through 5.0.13.1 uses a cross-domain policy file that includes domains that should not be trusted. Aspera Faspex 5.0.14+ Fix from $1,6002025-10-09 HIGH 7.8 CVE-2025-36156 IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. … Infosphere Data Replication Vsam For Z\/os Remote Source Mitigation only Fix from $1,9502025-10-07 MEDIUM 5.4 CVE-2025-1826 IBM Engineering Requirements Management DOORS Next (IBM Jazz Foundation 7.0.2 to 7.0.2 iFix034, 7.0.3 to 7.0.3 iFix016, and 7.1.0 to 7.1.0 iFix004) i… Jazz Foundation Patch available Fix from $1,6002025-10-07