IBM Patches Over 100 Vulnerabilities

IBM this week announced fixes for more than 100 vulnerabilities across its products, most of them in third‑party dependencies, with the emphasis on critical-severity defects. According to IBM’s security bulletins page, Storage Defender received patches for six critical bugs in third‑party components within Data Protect. Another critical flaw was addressed in IBM Guardium Data Protection’s implementation of the Apache Tomcat server, tracked as CVE-2025-48913, which could lead to code execution.

The company also fixed a critical-severity bug in the form-data library used by Maximo Application Suite, potentially allowing parameter injection in requests. Edge Data Collector was patched for a critical SQL injection defect in the Django web framework, while Observability with Instana (OnPrem) received patches for multiple critical issues in Tomcat, libxml2 and WebKit that could cause command execution, DoS, or process crashes.

A critical-severity issue in the Corosync library was addressed in IBM Db2, with the weakness potentially causing a process crash or arbitrary code execution if encryption is disabled or the attacker knows the encryption key.