CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

IBM MQ Operator Emergency Recovery Unauthenticated Access

The vulnerability of the emergency recovery function of the Native HA Cross-Region Replication CRR of the IBM MQ Operator allows a attacker to gain unauthorized access to protected information...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.17.2

The 1.17.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.17.2 release of Red Hat OpenShift Pipelines Operator...

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

CVE-2025-24286: Improper Privilege Management

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

CVE-2025-24286

CVE-2025-24286 affects Veeam Backup & Replication (12.x) where an authenticated user with the Backup Operator role can modify backup jobs, potentially enabling arbitrary code execution. The Red Hat/NC SC engagement notes and other sources corroborate this as a vulnerability in the backup server t...

CVE-2025-24286

A vulnerability allowing an authenticated user with the Backup Operator role to modify backup jobs, which could execute arbitrary code...

Veeam Patches CVE-2025-23121: Critical RCE Bug Rated 9.9 CVSS in Backup & Replication

Veeam has rolled out patches to contain a critical security flaw impacting its Backup & Replication software that could result in remote code execution under certain conditions. The security defect, tracked as CVE-2025-23121, carries a CVSS score of 9.9 out of a maximum of 10.0. "A vulnerability...

Veeam Backup and Replication 12.x < 12.3.2.3617 Multiple Vulnerabilities (June 2025) (KB4743)

The version of Veeam Backup and Replication installed on the remote Windows host is 12.x prior to 12.3.2.3617. It is, therefore, affected by multiple vulnerabilities: - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user. CVE-2025-23121 - A...

Veeam Backup & Replication security vulnerabilities

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication version 12.3.1.1139 and earlier, which originates from a backup job that can be modified by a user in the Backup Operator role, which could lead to the...

PT-2025-25743

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A vulnerability exists that allows an authenticated user with the Backup Operator role to modify backup jobs. This modification could potentially execute arbitrary code. Recommendations At the...

Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images

Summary Multiple vulnerabilities were addressed in IBM MQ Operator and Queue manager container images Vulnerability Details CVEID:CVE-2024-12133 DESCRIPTION: A flaw in libtasn1 causes inefficient handling of specific certificate data. When processing a large number of elements in a certificate,...

CVE-2025-36041

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose...

CVE-2025-36041

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose...

IBM MQ Operator Trust Management Vulnerability

IBM MQ Operator is a tool from International Business Machines IBM that is used to manage the lifecycle of IBM MQ Queue Manager. A trust management issue vulnerability exists in IBM MQ Operator that stems from a misconfiguration that could lead to disclosure of sensitive information or unauthoriz...

CVE-2025-36041: Improper Certificate Validation

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1 through 3.5.3, and MQ Operator SC2 3.2.0 through 3.2.12 Native HA CRR could be configured with a private key and chain other than the intended key which could disclose...

CVE-2025-22874 vulnerabilities

Vulnerabilities for packages: podinfo, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, maru, sbom-convert, dgraph, gosu, go-licenses, volume-modifier-for-k8s, velero-plugin-for-csi...

GHSA-6F52-WPX2-HVF2 vulnerabilities

Vulnerabilities for packages: podinfo, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, maru, sbom-convert, dgraph, gosu, go-licenses, volume-modifier-for-k8s, velero-plugin-for-csi...

GHSA-62JJ-GR2R-5C34 vulnerabilities

Vulnerabilities for packages: podinfo, kbld, harbor-cli, oauth2-proxy, terraform-provider-tls, php-fpmexporter, spire-server, envoy-gateway, terraform-provider-time, grpc-health-probe, logstash-exporter, maru, sbom-convert, dgraph, gosu, go-licenses, volume-modifier-for-k8s, velero-plugin-for-csi...