106558 matches found
Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to dojo.profile-1.9.7.js (CVE-2021-23450, CVE-2008-6681, CVE-2010-2273)
Summary dojo.profile is vulnerable to Prototype Pollution flaw, Cross-Site Scripting XSS attacks. These vulnerabilities affect IBM Spectrum Control. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject functio...
Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 (CVE-2024-21235,CVE-2024-21217,CVE-2024-21210,CVE-2024-21208,CVE-2024-10917)
Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2024 is vulnerable to a Side-Channel / Data Tampering Logic Errors , Deserialization of Untrusted Data , Observable Discrepancy , Integer Overflow or Wraparound attacks. This vulnerability affects IBM Spectrum Control. Vulnerability...
Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2024-40094)
Summary IBM WebSphere Application Server Liberty is vulnerable to denial of service attack. These vulnerabilities affect IBM Spectrum Control Vulnerability Details CVEID:CVE-2024-40094 DESCRIPTION: GraphQL Java aka graphql-java before 21.5 does not properly consider ExecutableNormalizedFields ENF...
Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to qs-6.13.0.tgz (CVE-2026-2391)
Summary qs is vulnerable to a Improper Input Validation attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-2391 DESCRIPTION: Summary The arrayLimit option in qs does not enforce limits for comma-separated values when comma: true is enabled, allowing...
Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM WebSphere Application Server Liberty (CVE-2025-14914)
Summary Immutable is vulnerable to a Path Traversal / "Zip Slip" attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-14914 DESCRIPTION: IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.1 could allow a privileged user to upload a zip archiv...
Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to axios-1.12.2.tgz (CVE-2026-25639)
Summary Immutable is vulnerable to a Denial of Service attack. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-25639 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function i...
Security Bulletin:IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Jan 2026 (CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925)
Summary IBM SDK, Java Technology Edition Quarterly CPU - Jan 2026 is vulnerable to a Uncontrolled Resource Consumption, Security Control Bypass, Low-Impact High-Complexity Data Bypass attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION:...
Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities
Summary Multiple security vulnerabilities in dependent components have been addressed in the latest update to IBM Security Verify Governance and its re-branded version, IBM Verify Identity Governance. Vulnerability Details CVEID:CVE-2026-1561 DESCRIPTION: IBM WebSphere Application Server - Libert...
Security Bulletin: Security vulnerabilities have been identified in IBM DB2 shipped with IBM License Metric Tool
Summary IBM DB2 is shipped with IBM License Metric Tool. Information about security vulnerabilities affecting IBM DB2 has been published in separate security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...
Security Bulletin: IBM Db2 and IBM Java SDK used by IBM Security Verify Governance contain multiple vulnerabilities
Summary IBM Security Verify Governance ISVG, now re-branded as IBM Verify Identity Governance IVIG, uses IBM Db2 database and IBM Java SDK. Information about security vulnerabilities affecting IBM Db2 and IBM Java SDK has been published in security bulletins. Vulnerability Details Refer to the...
Security Bulletin: IBM Spectrum Control is vulnerable to weaknesses related to IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 (CVE-2025-53066, CVE-2025-53057)
Summary IBM SDK, Java Technology Edition Quarterly CPU - Oct 2025 is vulnerable to a Exposure of Sensitive Information, Improper Access Control attacks. This vulnerability affects IBM Spectrum Control. Vulnerability Details CVEID:CVE-2025-53066 DESCRIPTION: An unspecified vulnerability in Java SE...
Several vulnerabilities exist in IBM AIX and IBM PowerVM VIOS.
IBM has hidden vulnerabilities in AIX and PowerVM VIOS. Additionally, IBM has also hidden previous vulnerabilities in products such as DB2, WebSphere, Oracle products like Java and GraalVM, PostgreSQL, OpenSSH, and Perl, for products produced for use with AIX. A malicious individual could exploit...
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
Summary DS8900F and DS8A00 updates have been released to remediate vulnerabilities in various components like IBM Java Quarterly Update, IBM WebSphere Application Server, IBM Power HMC, Linux Kernel, OpenSSL, libsoup, libssh, OpenSSH, net-snmp, Apache HTTP Server httpd, Expat libexpat, libpng,...
EUVD-2026-63751
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP packet to a reachable RPC service, resulting in complete system unavailability and requiring an LPAR restart...
EUVD-2026-63741
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-63745
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to an out-of-bounds write...
EUVD-2026-63748
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
EUVD-2026-63754
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause kernel memory corruption due to insufficient validation. A crafted filesystem image can trigger an out-of-bounds kernel-stack write during directory reads, causing a system crash or potentially enabling privilege...
EUVD-2026-63752
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...