CVE Tools
Track your stack

IBM

8,271 CVEs across 279 months on the top 200 list since Feb 2005. Peak rank #1 in 9 months, last Feb 2017. 7 of them are now in CISA KEV.

IBM CVEs per month since Feb 2005

Oct 2021 to Sep 2026 in the lens. Point at a month to read it, or drag the frame to move through the record.Tallest in the lens: 390, Aug 2026
Oct 2021: 44 CVEs · 4 critical · 0 now in CISA KEV · rank #15 · mostly Sterling B2B Integrator, Sterling File Gateway, Rational Collaborative Lifecycle ManagementNov 2021: 43 CVEs · 1 critical · 0 now in CISA KEV · rank #16 · mostly Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager, Infosphere Information ServerDec 2021: 42 CVEs · 4 critical · 0 now in CISA KEV · rank #15 · mostly Cognos Analytics, Spectrum Copy Data Management, DB2 For Linux, Unix and WindowsJan 2022: 23 CVEs · 2 critical · 0 now in CISA KEV · rank #38 · mostly Security Verify Access, Cognos Controller, Security Guardium InsightsFeb 2022: 21 CVEs · 1 critical · 0 now in CISA KEV · rank #41 · mostly Maximo Anywhere, Aix, Sterling External Authentication ServerMar 2022: 30 CVEs · 1 critical · 0 now in CISA KEV · rank #24 · mostly Vios, Aix, Spectrum Copy Data ManagementApr 2022: 48 CVEs · 3 critical · 0 now in CISA KEV · rank #19 · mostly Qradar Security Information and Event Manager, Qradar Siem, Cognos AnalyticsMay 2022: 37 CVEs · 3 critical · 0 now in CISA KEV · rank #22 · mostly Robotic Process Automation, Guardium Data Encryption, Robotic Process Automation As A ServiceJun 2022: 43 CVEs · 8 critical · 0 now in CISA KEV · rank #20 · mostly Jazz Team Server, Spectrum Copy Data Management, Robotic Process AutomationJul 2022: 65 CVEs · 3 critical · 0 now in CISA KEV · rank #11 · mostly Engineering Lifecycle Optimization - Publishing, Sterling Partner Engagement Manager On Cloud, Sterling Partner Engagement ManagerAug 2022: 23 CVEs · 4 critical · 0 now in CISA KEV · rank #37 · mostly Cics Tx Standard, Cics Tx, Cics Tx AdvancedSep 2022: 29 CVEs · 0 critical · 0 now in CISA KEV · rank #30 · mostly Cognos Analytics, Websphere Application Server, AixOct 2022: 12 CVEs · 0 critical · 0 now in CISA KEV · rank #62 · mostly Robotic Process Automation, Qradar Security Information and Event Manager, Infosphere Information ServerNov 2022: 43 CVEs · 3 critical · 0 now in CISA KEV · rank #17 · mostly Cics Tx, Infosphere Information Server, Robotic Process Automation For Cloud PakDec 2022: 40 CVEs · 0 critical · 0 now in CISA KEV · rank #27 · mostly Aix, Vios, Security Verify GovernanceJan 2023: 27 CVEs · 0 critical · 0 now in CISA KEV · rank #29 · mostly Sterling B2B Integrator, Sterling B2B Integrator Standard Edition, Robotic Process Automation For Cloud PakFeb 2023: 37 CVEs · 2 critical · 1 now in CISA KEV · rank #22 · mostly Infosphere Information Server, Sterling B2B Integrator Standard Edition, Sterling B2B IntegratorMar 2023: not on the top 200 that monthApr 2023: 26 CVEs · 0 critical · 0 now in CISA KEV · rank #33 · mostly DB2 For Linux, Unix and Windows, DB2, Safer PaymentsMay 2023: 32 CVEs · 1 critical · 0 now in CISA KEV · rank #20 · mostly Mq, Infosphere Information Server, Mq ApplianceJun 2023: 31 CVEs · 0 critical · 0 now in CISA KEV · rank #27 · mostly Security Directory Suite Va, Qradar Security Information and Event Manager, Txseries For MultiplatformsJul 2023: 46 CVEs · 0 critical · 0 now in CISA KEV · rank #16 · mostly DB2, DB2 For Linux, Unix and Windows, Cloud Pak For DataAug 2023: 31 CVEs · 1 critical · 0 now in CISA KEV · rank #30 · mostly Security Guardium, Robotic Process Automation, Guardium Cloud Key ManagerSep 2023: 20 CVEs · 0 critical · 0 now in CISA KEV · rank #41 · mostly Aspera Faspex, Sterling Secure Proxy, Sterling External Authentication ServerOct 2023: 62 CVEs · 0 critical · 0 now in CISA KEV · rank #11 · mostly Security Verify Privilege On-premises, Security Verify Privilege, DB2 For Linux, Unix and WindowsNov 2023: 18 CVEs · 0 critical · 0 now in CISA KEV · rank #35 · mostly Cics Tx Advanced, Cics Tx, Cics Tx StandardDec 2023: 54 CVEs · 0 critical · 0 now in CISA KEV · rank #11 · mostly DB2 For Linux, Unix and Windows, Infosphere Information Server, DB2Jan 2024: 30 CVEs · 4 critical · 0 now in CISA KEV · rank #31 · mostly DB2, DB2 For Linux, Unix and Windows, ViosFeb 2024: 86 CVEs · 2 critical · 0 now in CISA KEV · rank #9 · mostly Powersc, Security Verify Access Appliance, Security Verify Access DockerMar 2024: 63 CVEs · 0 critical · 0 now in CISA KEV · rank #14 · mostly Secure Proxy, Sterling Secure Proxy, DS8900FApr 2024: 40 CVEs · 1 critical · 0 now in CISA KEV · rank #27 · mostly DB2 For Linux, Unix and Windows, Aspera Faspex, DB2May 2024: 53 CVEs · 1 critical · 0 now in CISA KEV · rank #27 · mostly Cognos Controller, App Connect Enterprise, Security GuardiumJun 2024: 51 CVEs · 0 critical · 0 now in CISA KEV · rank #15 · mostly Infosphere Information Server, Security Access Manager, Security Access Manager DockerJul 2024: 36 CVEs · 0 critical · 0 now in CISA KEV · rank #29 · mostly Datacap Navigator, Datacap, Security Verify Directory IntegratorAug 2024: 31 CVEs · 0 critical · 0 now in CISA KEV · rank #31 · mostly Qradar Suite Software, DB2, DB2 For Linux, Unix and WindowsSep 2024: 21 CVEs · 1 critical · 0 now in CISA KEV · rank #33 · mostly Aspera Faspex, Webmethods Integration, MqOct 2024: 10 CVEs · 1 critical · 0 now in CISA KEV · rank #71 · mostly Websphere Application Server, Concert, Power System S812 \(8284-21a\) FirmwareNov 2024: 32 CVEs · 4 critical · 0 now in CISA KEV · rank #33 · mostly Concert, Concert Software, Security Verify AccessDec 2024: 56 CVEs · 1 critical · 0 now in CISA KEV · rank #14 · mostly Cognos Controller, Cognos Analytics, Security Guardium Key Lifecycle ManagerJan 2025: 118 CVEs · 3 critical · 0 now in CISA KEV · rank #9 · mostly Sterling B2B Integrator, Concert Software, Cloud Pak SystemFeb 2025: 79 CVEs · 2 critical · 0 now in CISA KEV · rank #8 · mostly Entirex, Applinx, Security Verify AccessMar 2025: 39 CVEs · 3 critical · 0 now in CISA KEV · rank #24 · mostly Infosphere Information Server, Engineering Requirements Management Doors Next, Common Cryptographic ArchitectureApr 2025: 36 CVEs · 1 critical · 0 now in CISA KEV · rank #22 · mostly Aspera Console, Txseries For Multiplatforms, Infosphere Information ServerMay 2025: 45 CVEs · 1 critical · 0 now in CISA KEV · rank #22 · mostly DB2, DB2 For Linux, Unix and Windows, Concert SoftwareJun 2025: 48 CVEs · 3 critical · 0 now in CISA KEV · rank #21 · mostly Qradar Suite Software, Infosphere Information Server, Cloud Pak For SecurityJul 2025: 54 CVEs · 0 critical · 0 now in CISA KEV · rank #25 · mostly DB2, Openpages With Watson, Cognos Analytics MobileAug 2025: 35 CVEs · 1 critical · 0 now in CISA KEV · rank #30 · mostly Websphere Application Server, Concert, Concert SoftwareSep 2025: 44 CVEs · 0 critical · 0 now in CISA KEV · rank #24 · mostly Concert, Concert Software, Watsonx.dataOct 2025: 40 CVEs · 3 critical · 0 now in CISA KEV · rank #26 · mostly Transformation Extender Advanced, DB2 High Performance Unload, Engineering Requirements Management Doors NextNov 2025: 40 CVEs · 3 critical · 0 now in CISA KEV · rank #14 · mostly DB2, Concert, Cloud Pak For Business AutomationDec 2025: 28 CVEs · 1 critical · 0 now in CISA KEV · rank #28 · mostly Aspera Orchestrator, Concert, ControllerJan 2026: 39 CVEs · 0 critical · 0 now in CISA KEV · rank #21 · mostly DB2 For Linux, Unix and Windows, DB2, ApplinxFeb 2026: 57 CVEs · 1 critical · 0 now in CISA KEV · rank #8 · mostly Concert, DB2 Recovery Expert, DB2 Recovery Expert For LuwMar 2026: 72 CVEs · 0 critical · 0 now in CISA KEV · rank #16 · mostly Infosphere Information Server, Sterling File Gateway, Sterling B2B IntegratorApr 2026: 48 CVEs · 1 critical · 0 now in CISA KEV · rank #20 · mostly Verify Identity Access, Verify Identity Access Container, Security Verify Access ContainerMay 2026: 49 CVEs · 6 critical · 0 now in CISA KEV · rank #20 · mostly HTTP Server, DB2, Aspera High-speed Transfer ServerJun 2026: 75 CVEs · 16 critical · 0 now in CISA KEV · rank #11 · mostly Websphere Application Server, Langflow Oss, Watsonx.data IntelligenceJul 2026: 105 CVEs · 25 critical · 0 now in CISA KEV · rank #11 · mostly Langflow Oss, Websphere Application Server, Websphere Application Server - LibertyAug 2026: 390 CVEs · 51 critical · 0 now in CISA KEV · rank #5 · mostly Powervm Vios, Aix, ViosSep 2026 so far: 297 CVEs · 32 critical · 0 now in CISA KEV · rank #5 · mostly Guardium Data Protection, Langflow Oss, I

In the lens

The products that kept showing up in IBM's monthly top three from Oct 2021 to Sep 2026. Move the lens and the list follows.

  1. Aix1655 months
  2. Vios1644 months
  3. Powervm Vios1451 month
  4. DB29711 months
  5. DB2 For Linux, Unix and Windows8610 months
  6. Langflow Oss813 months
  7. Infosphere Information Server7711 months
  8. Sterling B2B Integrator485 months
  9. Guardium Data Protection421 month
  10. Websphere Application Server425 months

Year by year

Each year's months on the top 200 list. Pick a year to read it in the lens.

The record

Peak rank
#1 in 9 months, last Feb 2017
Busiest month
Aug 2026, 390 CVEs
Months with a KEV entry
6 of 240 on the list
On the top 200 list
240 of 260 monthly snapshots

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store