EUVD-2025-210809

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36271

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36290

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

CVE-2025-36290 IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...

PT-2026-83320

Name of the Vulnerable Software and Affected Versions IBM Integrated Analytics System versions 1.0.0.0 through 1.0.31.0 Description The system fails to properly validate TLS certificates. This flaw allows an attacker to perform man-in-the-middle techniques to intercept and obtain sensitive...

PT-2026-83319

IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

Security Bulletin: IBM Integrated Analytics System (IIAS) is affected by a deserialization vulnerability due to PLY (Python Lex-Yacc)

Summary PLY Python Lex-Yacc is used by IBM Integrated Analytics System as a Python parsing library implementing lex and yacc tools. CVE-2025-56005 affects PLY version 3.11 due to deserialization of untrusted data CWE-502. This critical vulnerability could allow a remote attacker, without any...

Security Bulletin: Vulnerability in Dojo affects IBM Integrated Analytics System[CVE-2021-23450]

Summary The Dojo package is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addresed the applicable CVE CVE-2021-23450. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: All versions of package dojo are vulnerable to Prototype Pollution via the setObject functio...

EUVD-2013-3410

Malware in sbrugna...

EUVD-2025-25664

Malicious code in bioql PyPI...

Security Bulletin: Vulerability jetty-server affects IBM Integrated Analytics System

Summary The jetty-server component is used by IBM Integrated Analytics System for handling HTTP requests. A vulnerability was identified in the ThreadLimitHandler.getRemote method, where crafted requests can cause memory exhaustion and OutOfMemory errors. As this condition is unhandled, it may le...

The vulnerability of the SAP Business Warehouse data management and analytics system, related to executing a cycle with an unavailable exit condition, allows a perpetrator to trigger a service failure.

The vulnerability of the SAP Business Warehouse data management and analytics system is related to the execution of a cycle with an unavailable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Security Bulletin: Vulerability commons-io affects IBM Integrated Analytics System

Summary The commons-io library is used by IBM Integrated Analytics System for input/output processing. A vulnerability was identified in the org.apache.commons.io.input.XmlStreamReader class, where processing untrusted input could result in excessive CPU usage, potentially leading to a denial of...

Security Bulletin: Vulerability commons-fileupload affects IBM Integrated Analytics System

Summary The commons-fileupload package is used by IBM Integrated Analytics System as part of its file upload processing functionality. A denial-of-service DoS vulnerability was identified in Apache Commons FileUpload due to insufficient limits on multipart headers, which could allow a remote...

CVE-2025-36174

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-36174

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-36174 IBM Integrated Analytics System file upload

IBM Integrated Analytics System 1.0.0.0 through 1.0.30.0 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened...

CVE-2025-36174

CVE-2025-36174 affects IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.30.0. A vulnerability in the file-upload feature allows an authenticated user to upload files with dangerous types, which could be executed by another user when opened. Root cause identified as unrestricted...

IBM Integrated Analytics System 代码问题漏洞

IBM Integrated Analytics System is an integrated data analytics platform from International Business Machines IBM. A code issue vulnerability exists in IBM Integrated Analytics System versions 1.0.0.0 through 1.0.30.0, which stems from allowing the upload of dangerously typed files could lead to...

PT-2025-34546 · Ibm · Integrated Analytics System

Name of the Vulnerable Software and Affected Versions: IBM Integrated Analytics System versions 1.0.0.0 through 1.0.30.0 Description: The software allows an authenticated user to upload files with dangerous types. If opened by another user, these files could lead to code execution. Recommendation...