The vulnerability of the Java framework for securing industrial applications using Spring Security arises from the use of a non-safe direct reference to objects. This allows attackers to execute arbitrary code.

Spring Security flaw enables code execution via insecure direct references in web requests.

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Spring	27 Apr 202609:03	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Direct Request ('Forced Browsing') (CVE-2026-22732)	16 Jun 202614:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	31 Mar 202612:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in spring-security-web (CVE-2026-22732)	4 May 202616:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.1	31 Mar 202616:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2026 - Multiple CVEs addressed	29 May 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Spring Vulnerabilities in IBM Library Support for Spring	31 Mar 202616:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Controller is affected by vulnerabilities	19 May 202615:14	–	ibm