CLSA-2026-1775608270 TuxCare security update for org.apache.ivy:ivy (2 CVEs)

🗓️ 04 Aug 2026 14:52:22Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare updates ivy to fix three CVEs in version 2.3.0-tuxcare.1.

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to Path Traversal due to Apache Ivy (CVE-2022-37865, CVE-2022-37866)	30 Mar 202319:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Apache Ivy affect IBM Cloud Pak System	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® Graph	24 Apr 202322:02	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operations Analytics Predictive Insights.	27 Mar 202415:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Deploy (UCD) is vulnerable to XML external entity XXE due to Apache Ivy	22 Sep 202318:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	30 Jul 202517:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Apache Ivy information disclosure vulnerabilitiy [CVE-2023-46751]	31 Jan 202413:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm

15 Sep 2026 21:12Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.2

EPSS0.01999

SSVC

Apache Ivy TuxCare update Vulnerabilities fixed