CVE-2026-50684 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2026-50647

CVE-2026-50647: AD FS denial-of-service due to an infinite loop in AD FS. Public sources (NVD/EUVD/NCSC, CIRCL sighting, MSRC) confirm a network-exploitable condition causing service disruption; no exploitation details provided in the docs. Microsoft has released updates addressing the vulnerabil...

CVE-2026-50647 Active Directory Federation Server Denial of Service Vulnerability

...

CVE-2025-36054

IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This...

CVE-2025-36054

IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This...

CVE-2025-36054 Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server -

IBM Business Automation Workflow containers 24.0.0 through 24.0.0-IF006, 24.0.1 through 24.0.1-IF004, 25.0.0 through 25.0.0-IF001 and IBM Business Automation Workflow traditional with Process Federation Server 24.0.0 through 24.0.1 and 25.0.0 are vulnerable to cross-site scripting. This...

CVE-2025-36054

IBM Business Automation Workflow containers (versions 24.0.0-IF006 to 24.0.0, 24.0.1-IF004, 25.0.0-IF001) and the traditional with Process Federation Server (24.0.0 to 24.0.1, 25.0.0) are affected by a cross-site scripting (CWE-79) vulnerability (CVE-2025-36054). An unauthenticated attacker can i...

Security Bulletin: Cross-site scripting vulnerability affect IBM Business Automation Workflow Process Federation Server - CVE-2025-36054

Summary IBM Business Automation Workflow Process Fedeeration Server is vulnerable to a Cross-site scripting attack. Vulnerability Details CVEID:CVE-2025-36054 DESCRIPTION: IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker...

IBM Business Automation Workflow containers和IBM Business Automation Workflow traditional with Process Federation Server 跨站脚本漏洞

IBM Business Automation Workflow containers and IBM Business Automation Workflow traditional with Process Federation Server are both International Business Machines IBM suites of enterprise process automation platforms from International Business Machines IBM. A cross-site scripting vulnerability...

EUVD-2020-25572

Malware in sbrugna...

EUVD-2021-28389

Malicious code in bioql PyPI...

EUVD-2025-2270

Malicious code in bioql PyPI...

CVE-2025-21193

Active Directory Federation Server Spoofing Vulnerability...

CVE-2025-21193 Active Directory Federation Server Spoofing Vulnerability

...

CVE-2025-21193 Active Directory Federation Server Spoofing Vulnerability

...

Active Directory Federation Server Spoofing Vulnerability

...

PT-2025-1211 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Server affected versions not specified Description: The issue is related to a spoofing vulnerability in the Active Directory Federation Server component of the Windows operating system, which is associated with...

Security Bulletin: Denial of Service vulnerabilities affect IBM Business Automation Workflow - optional Process Federation Server component (CVE-2022-42003, CVE-2022-42004)

Summary Optional component Process Federation Server in IBM Business Automation Workflow is affected by Denial of Service vulnerabilities reported for jackson-databind. Vulnerability Details CVEID:CVE-2022-42003 DESCRIPTION: FasterXML jackson-databind is vulnerable to a denial of service, caused ...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server Liberty shipped with the optional IBM Business Process Manager component Process Federation Server (CVE-2017-1788)

Summary WebSphere Application Server Liberty is shipped as a component of the optional IBM Business Process Manager component Process Federation Server. Information about a security vulnerability affecting IBM WebSphere Application Server Liberty have been published in a security bulletin...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (Java CPU June 2018)

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow, IBM Business Process Manager, WebSphere Process Server, WebSphere Enterprise Service Bus, and WebSphere Lombardi Edition. WebSphere Application Server Liberty is shipped as a component of the...