Remote code execution

2024-02-0203:15:00

PRIOn knowledge base

www.prio-n.com

ibm

operational decision manager

remote code execution

vulnerability

jndi injection

api

x-force id

nvd

9.3 High

AI Score

Confidence

High

0.347 Low

EPSS

Percentile

97.1%

JSON

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145.

CPENameOperatorVersion
operational_decision_managereq8.10.3
operational_decision_managereq8.10.4
operational_decision_managereq8.10.5.1
operational_decision_managereq8.11
operational_decision_managereq8.11.0.1
operational_decision_managereq8.12.0.1

Name	Operator	Version
operational_decision_manager	eq	8.10.3
operational_decision_manager	eq	8.10.4
operational_decision_manager	eq	8.10.5.1
operational_decision_manager	eq	8.11
operational_decision_manager	eq	8.11.0.1
operational_decision_manager	eq	8.12.0.1