IBM

CPE vendor key: ibm · 1,308 CVEs published in the last 24 months.

CVEs (365 d)

739

▲ +204 vs prior 30d

Avg CVSS (365 d)

6.51

over 739 CVEs

Avg EPSS pct (365 d)

0.19

higher = more likely exploited

KEV hit rate (365 d)

0.0%

0 of 739 added to CISA KEV

LLM-credited CVEs

none detected

Monthly CVE volume — last 24 months

Each point is one calendar month. Bars in the severity card to the right slice the same volume by CVSS band.

Severity mix

Stacked by CVSS band (Critical / High / Medium / Low) using the best available metric per CVE.

Top affected products (24 mo)

aix

165

154

db2

websphere_application_server

concert

vios

sterling_b2b_integrator

security_verify_access

infosphere_information_server

sterling_file_gateway

Distinct CVEs that include each product in their CPE configuration.

Top CWEs (24 mo)

149

Distinct CVEs assigned each weakness.

Recent CISA KEV adds (last 12 months)

Added	CVE	Product	KEV name
2026-08-04	CVE-2026-9198	Langflow	IBM Langflow Code Injection Vulnerability

Filtered to KEV entries whose CISA vendor or product name matches this vendor exactly, to drop cross-OS noise (e.g. third-party Windows apps that CPE-map to Microsoft).

Generated 23 August 2026 22:22 UTC .