PT-2026-47656

🗓️ 09 Jun 2026 00:00:00Reported by Positive TechnologiesType

Incorrect escaping in JavaScriptUtils.javaScriptEscape may enable JavaScript injection and cross-site scripting.

Reporter	Title	Published	Views	Family All 408
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Netty.Spring WebFlux,Spring Framework,Bootstrap,Angular,Lodash,spring-security-config,Underscore might affect IBM Storage Defender Copy Data Management	30 Sep 202617:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.	11 Oct 202614:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Cross-site Scripting attacks, Denial of Service (DoS) attacks, and Server-Side Request Forgery attacks	26 Jun 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Framework Affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	15 Sep 202613:00	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability is addressed in IBM Daeja ViewONE as part of iFix release in August 2026	27 Aug 202610:34	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Bouncy Castle for Java, IBM Sterling Control Center is vulnerable to Uncontrolled Recursion(CVE-2026-59645)	22 Sep 202610:03	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	28 Aug 202605:59	–	ibm
IBM Security Bulletins	Security Bulletin: There are vulnerabilities in IBM Maximo Manage application in IBM Maximo Application Suite	16 Sep 202606:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	22 Oct 202607:57	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-67721
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-14683
osv	www.osv.dev/vulnerability/ROOT-APP-MAVEN-CVE-2026-41845
osv	www.osv.dev/vulnerability/CVE-2026-56745
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44913
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-41852
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-54514
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56746
osv	www.osv.dev/vulnerability/CVE-2026-41851
osv	www.osv.dev/vulnerability/CVE-2026-41852

18 Sep 2026 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.1 - 7.5

CVSS 48.7

EPSS0.00408

SSVC