IBM
Security Scorecard
Score
25F
Total CVEs
299
Patch Rate
6%
19 patched
Avg Response
-
days to patch
Critical Gaps
38
exploitable, no detection
Severity Breakdown
Critical1
High144
Medium117
Low31
Patch Status
Patched19 (6%)
Partial/Workaround3 (1%)
Unpatched277 (93%)
CVEs (302)
| CVE ID | Title | Severity | Score | Days | Patch |
|---|---|---|---|---|---|
| CVE-2025-36035 | IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 Denial of Service Vulnerability | MEDIUM | 6.7 | 96d | Unpatched |
| CVE-2025-36100 | IBM MQ Password Disclosure Vulnerability | MEDIUM | 5.1 | 103d | Unpatched |
| CVE-2024-40700 | IBM Security Verify Access Vulnerability | MEDIUM | 6.1 | 314d | Unpatched |
| CVE-2024-45659 | IBM Security Verify Access Appliance Vulnerability | MEDIUM | 5.3 | 314d | Unpatched |
| CVE-2024-43187 | IBM Security Verify Access Appliance Vulnerability | MEDIUM | 5.9 | 314d | Unpatched |
| CVE-2024-45657 | IBM Security Verify Access Appliance Vulnerability | MEDIUM | 5.0 | 314d | Unpatched |
| CVE-2017-4082 | Zero-Day RCE in WebSphere Application Server | N/A | - | 2837d | Unpatched |
| CVE-2013-0068 | Unspecified | N/A | - | 3143d | Unpatched |
| CVE-2013-6090 | Unspecified | N/A | - | 3143d | Unpatched |
| CVE-2015-7164 | Zero-Day Vulnerability in a Legacy Web Framework | N/A | - | 3144d | Unpatched |