Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.25 / 10.4.x < 11.3.11 (JSDSERVER-16755)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16755 advisory. - In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to enforce tag-length on...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-12185...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Bouncy Castle for Java. Bouncy Castle is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-13505...

CLEANSTART-2026-XF81157 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-QO13189 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-CE73724 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-DA66698 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-ZX80085 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-MT03489 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-PP90634 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-YZ86171 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-WJ50656 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-DK36206 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-BK39147 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-JL85698 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-PP12728 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java

Summary IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with...

Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 / 11.0.0 (CONFSERVER-104505)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104505 advisory. - In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy...

Atlassian Confluence < 9.2.24 / 9.5.x < 10.2.17 / 11.0.0 (CONFSERVER-104473)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104473 advisory. - In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects...

Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 / 11.0.0 (CONFSERVER-104470)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104470 advisory. - In Bouncy Castle for Java before 1.85, RSA PKCS1 verification skips last two hash bytes in NULL-omitted path. This issue also affects Bouncy Cast...