PT-2026-31943

🗓️ 10 Apr 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 30 Views

JsonTemplateLayout before 2.25.4 outputs invalid JSON for non-finite floats; upgrade.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	20 Aug 202615:19	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in jackson-databind-2.16.0.jar	15 Sep 202620:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in jackson-databind [CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515]	24 Aug 202622:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM® Db2® federated server is affected by a vulnerability in log4j (CVE-2026-49844)	8 Oct 202616:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j	31 Jul 202608:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Scheduler Optimizer uses log4j-core-2.25.3.jar which is vulnerable to CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480	7 Jul 202613:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple log4j related security vulnerabilities in IBM Guardium Key Lifecycle Manager	13 Jul 202609:24	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/CLEANSTART-2026-CS40307
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59889
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34478
osv	www.osv.dev/vulnerability/OESA-2026-3153
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34480
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-59888
osv	www.osv.dev/vulnerability/CVE-2026-59889
osv	www.osv.dev/vulnerability/CVE-2026-34478
suse	www.suse.com/security/cve/CVE-2026-34477
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-71290

14 Oct 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.3 - 7.5

CVSS 46.9

EPSS0.00691

SSVC

log4j json non finite floats invalid json output security vulnerability upgrade 2.25.4