PT-2025-42473

🗓️ 16 Oct 2025 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 11 Views

STOMP over WebSocket bypass affects Spring Framework; upgrade to 6.2.12 or 6.1.24, and 5.3.x to 5.3.46.

Reporter	Title	Published	Views	Family All 584
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tomcat-embed-core-9.0.110.jar	28 Apr 202622:39	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Improper Locking (CVE-2026-22735)	15 Jun 202622:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Spring	27 Apr 202609:03	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat might affect IBM Storage Defender Copy Data Management	4 May 202616:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to multiple vulnerabilities due to Apache Tomcat	14 May 202614:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache ZooKeeper	24 Jun 202621:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2026.	27 Mar 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps	29 Apr 202613:24	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:47	–	ibm

Source	Link
reddit	www.reddit.com/r/VulnMatter/comments/1obkvoc/resumen_diario_de_vulnerabilidades_20102025
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-4923
twitter	www.twitter.com/zoomeye_team/status/1979125540759179645
osv	www.osv.dev/vulnerability/CVE-2026-1225
spring	www.spring.io/security/cve/2025-41254
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-33870
osv	www.osv.dev/vulnerability/CVE-2025-7962
osv	www.osv.dev/vulnerability/CVE-2026-24281
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-22735
osv	www.osv.dev/vulnerability/CVE-2026-22737

22 Jun 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 3.14.3 - 7.5

EPSS0.01177

SSVC