IBM
Security Scorecard
Score
20F
Total CVEs
318
Patch Rate
23%
73 patched
Avg Response
1733d
days to patch
Critical Gaps
38
exploitable, no detection
Severity Breakdown
Critical3
High151
Medium127
Low31
Patch Status
Patched73 (23%)
Partial/Workaround3 (1%)
Unpatched242 (76%)
CVEs (322)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-36418 | IBM ApplinX Privilege Escalation | High | 7.3 | - | Patched |
| CVE-2019-25278 | CVE-2019-25278 | High | 7.5 | - | Patched |
| CVE-2019-25279 | FaceSentry Access Control System Vulnerability | High | 8.2 | - | Patched |
| CVE-2025-13915 | IBM API Connect Authentication Bypass | Critical | 9.8 | - | Patched |
| CVE-2025-13481 | Aspera Orchestrator Vulnerability | High | 8.8 | - | Patched |
| CVE-2025-13214 | Aspera Orchestrator SQL Injection | High | 7.6 | - | Patched |
| CVE-2025-13211 | IBM Aspera Orchestrator Denial of Service Vulnerability | Medium | 5.3 | - | Patched |
| CVE-2025-36437 | IBM Planning Analytics Local Vulnerability | Medium | 4.3 | - | Workaround |
| CVE-2025-64650 | IBM Storage Defender Resiliency Service Vulnerability | Medium | 6.5 | - | Patched |
| CVE-2025-36140 | IBM watsonx.data Denial of Service Vulnerability | Medium | 6.5 | - | Patched |