Browse / IBM

IBM

See its reports on the map

Attack surface: 559,778 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to IBM

• SQL Injection8
• Cross-site Scripting7
• Access Control6
• Code Execution6
• Authentication6
• Information Disclosure5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. SQL Injection vulnerability found on ibm.com endpointSQL Injection · critical
   137 votes
2. Potential Subdomain Takeover on IBM.com domain.Improper Access Control - Generic · high
   82 votes
3. Middleware Authentication Bypass on IBM PortalCommand Injection - Generic · critical
   80 votes
4. SSRF via host header let access localhost via https://go.dialexa.comServer-Side Request Forgery (SSRF) · medium
   75 votes
5. S3 Bucket Takeover on apptio endpointImproper Access Control - Generic · medium
   72 votes
6. SSRF and secret key disclosure found on Turbonomic endpointServer-Side Request Forgery (SSRF) · high
   71 votes
7. [RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Code Injection · critical
   67 votes
8. Unauthenticated Remote Access to Testing EndpointImproper Access Control - Generic · critical
   67 votes
9. RXSS in hidden parameterCross-site Scripting (XSS) - Reflected · medium
   65 votes
10. XSS Refelected on jazz.netCross-site Scripting (XSS) - Reflected · medium
    64 votes
11. Path Traversal Vulnerability found on IBM CloudPath Traversal · critical
    63 votes
12. Remote Code Execution identified on IBM endpoint.Code Injection · critical
    60 votes
13. Exposed Logs and Bearer Tokens on Test EndpointInformation Disclosure
    57 votes
14. Insecure Direct Object Reference Protection bypass by changing HTTP method in IBM Your Learning endpoint. Insecure Direct Object Reference (IDOR) · critical
    57 votes
15. IDOR in upload videos of a Channel on https://video.ibm.comInsecure Direct Object Reference (IDOR) · critical
    57 votes
16. SSRF and secret key disclosure found on Turbonomic endpointServer-Side Request Forgery (SSRF) · high
    56 votes
17. SQL Injection in IBM access control panel & Broken access in admin panelSQL Injection · critical
    54 votes
18. XSS in Aspera documentation websiteCross-site Scripting (XSS) - DOM · medium
    52 votes
19. Information disclosure on IBM training service endpointInsecure Direct Object Reference (IDOR)
    49 votes
20. IBM OpenPages vulnerable to exposure of sensitive informationImproper Authentication - Generic · medium
    49 votes
21. Remote Code Execution at https://169.38.86.185/ (edst.ibm.com)Command Injection - Generic · critical
    49 votes
22. IBM Aspera HTTP Gateway stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user.Information Disclosure · high
    46 votes
23. POST based Cross-Site Scripting on IBM research endpointCross-site Scripting (XSS) - Reflected · medium
    44 votes
24. jazz.net - publicly accessible .svn repositoriesLLM06: Sensitive Information Disclosure
    43 votes
25. Reflected XSS and Blind out of band command injection at subdomain dstuid-ww.dst.ibm.comOS Command Injection · high
    42 votes
26. sql injection via https://setup.p2p.ihost.com/SQL Injection · critical
    41 votes
27. Weak credentials found in Jenkins endpointcritical
    40 votes
28. Information disclosure identified on IBM endpoint. Information Disclosure · medium
    39 votes
29. XSS in IBM InfoCenterCross-site Scripting (XSS) - DOM · medium
    39 votes
30. Jenkins server access due to weak passwordImproper Authentication - Generic · high
    39 votes
31. There is a POST based CSRF issue over IBM endpoint leading to modification of contact information. Cross-Site Request Forgery (CSRF) · medium
    38 votes
32. IBM Maximo Asset Management could allow a remote attacker to bypass authentication due to improper access controlsImproper Access Control - Generic · medium
    37 votes
33. SQL Injection vulnerability found on IBM.com subdomainSQL Injection
    36 votes
34. Improper Authentication on Alertmanager instanceImproper Authentication - Generic · medium
    36 votes
35. SQL injection in URL path processing on www.ibm.comSQL Injection · critical
    35 votes
36. SQL Injection found on ibm.com subdomainSQL Injection · critical
    33 votes
37. response manipulation leads to bypass in register at employee website than 0 click account takeoverImproper Authentication - Generic · critical
    32 votes
38. Cleartext storage of sensitive information at https://staging.status.ai-apps-comms.ibm.com/env can lead to account takeover of several IBM employeesCleartext Storage of Sensitive Information · critical
    31 votes
39. Reflected Cross-Site Scripting (XSS) found on IBM.com domainCross-site Scripting (XSS) - Reflected
    29 votes
40. Subdomain Takeover Affecting at vex.weather.comImproper Authentication - Generic · critical
    26 votes
41. Unauthorized vertical privilege escalation vulnerability found on ibm.com endpointImproper Access Control - Generic
    25 votes
42. Public Jenkins instance with /script enabledImproper Access Control - Generic · critical
    16 votes
43. CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability - https://esccvc.de.ibm.comPath Traversal · high
    16 votes
44. Insecure Object Permissions for Guest User leads to access to internal documents!Improper Authentication - Generic · critical
    15 votes
45. Blind SQL Injection — IBM Training Course Search APISQL Injection · critical
    13 votes
46. Unauthorized Kubernetes to RCE (root) and found TEAMTNT Crypto Miner on itCode Injection · critical
    12 votes
47. Moodle XSS on s-immerscio.comprehend.ibm.comCross-site Scripting (XSS) - Reflected · medium
    11 votes
48. SQL Injection and plaintext passwords via User SearchSQL Injection · high
    11 votes
49. Path Traversal vulnerability identified on IBM endpoint. Path Traversal · high
    10 votes