OESA-2026-4422 kafka security update

🗓️ 22 Oct 2026 14:34:58Reported by GoogleType

osv_oesa🔗 osv.dev👁 9 Views

Log4j 1.x vulnerabilities allow RCE via JMSSink or SQL injection via JDBCAppender.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Due to use of Apache Log4j, IBM Netcool/OMNIbus Probe DSL Factory Framework is vulnerable to arbitrary code execution (CVE-2022-23302, CVE-2022-23307) and SQL injection (CVE-2022-23305)	16 Mar 202202:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management is vulnerable due to issues in JDOM, Apache Log4j 1.x, Apache ActiveMQ and Apache Camel	24 Jun 202511:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Datacap	16 Jul 202614:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS and DOORS Web Access is affected by multiple vulnerabilities	6 Jul 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: An IBM QRadar SIEM SNMP protocol is vulnerable to a denial of service, SQL injection and could allow a remote attacker to execute arbitrary code on the system.	15 May 202408:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities in Apache kafka-client may affect IBM Business Automation Workflow - CVE-2025-27817, CVE-2025-27818	6 Nov 202510:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Kafka Clients affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	13 Mar 202516:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Log4j vulnerability (CVE-2022-23305)	4 Apr 202205:24	–	ibm

Source	Link
openeuler	www.openeuler.org/zh/security/security-bulletins/detail/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23302
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23305
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-23307
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-25194
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-44981
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-31141
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-56128
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27818
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27819

22 Oct 2026 14:45Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.9581

Apache Kafka Log4j JMSSink JDBCAppender remote code execution SQL injection