CVE-2026-19515 OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

CVE-2026-19515

CVE-2026-19515 is an OS command injection vulnerability in the WSO2 Integrator MI VS Code extension . The extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources , allowing a crafted project to inject and execute...

CVE-2026-83131: Improper Access Control

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle...

CVE-2026-19515: Improper Neutralization of Special Elements used in an OS Command

The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untrusted sources. This allows a crafted project to inject and execute arbitrary operating system commands through the unit test execution flow...

CVE-2026-70755: Improper Access Control

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle W...

PT-2026-91921

Name of the Vulnerable Software and Affected Versions WSO2 Integrator MI VS Code extension affected versions not specified Description The WSO2 Integrator MI VS Code extension fails to properly sanitize or validate user-supplied input when processing Micro Integrator projects opened from untruste...

CVE-2026-83232: Improper Authentication

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Console / Repository Explorer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-92479

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite component: File download. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle W...

PT-2026-92755

Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Console / Repository Explorer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

PT-2026-92655

Name of the Vulnerable Software and Affected Versions Oracle Web Applications Desktop Integrator versions 12.2.3 through 12.2.15 Description A flaw in the File download component allows a low privileged attacker with network access via HTTPS to compromise the system. This issue can lead to...

CVE-2026-19273

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

CVE-2026-19273

CVE-2026-19273 affects the Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway (Standard Edition), versions 6.2.0.0 through 6.2.0.6_2, 6.2.1.0–6.2.1.2, and 6.2.2.0–6.2.2.1. The root cause is improper authentication (CWE-287), which allows a remote authenticated attacker to bypa...

CVE-2026-19273 The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server - Liberty affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-14917)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to IBM WebSphere Application Server - Liberty Vulnerability Details CVEID:CVE-2025-14917 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application...

Security Bulletin: Security Vulnerability in Apache MINA affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-41409 CVE-2026-41635)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache MINA Vulnerability Details CVEID:CVE-2026-41409 DESCRIPTION: The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed...

The vulnerability of the Rest Service component of the software platform for data integration and the creation of corporate repositories allows a hacker to gain full control over the application.

The vulnerability of the Rest Service component of the software platform for data integration and the creation of corporate repositories in Oracle Data Integrator is related to the lack of authentication for the critical function. Exploiting this vulnerability can allow a malicious actor to gain...

CVE-2026-19273: Improper Authentication

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.62, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper...

Security Bulletin: The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control (CVE-2026-19273)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-19273 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to...

Security Bulletin: Denial of Service Security Vulnerability in Spring Framework Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22740)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22740 DESCRIPTION: A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K. Under some circumstance...

Security Bulletin: Security Misconfiguration Vulnerability in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22748)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the security vulnerability Vulnerability Details CVEID:CVE-2026-22748 DESCRIPTION: Vulnerability in Spring Spring Security. When an application configures JWT decoding with NimbusJwtDecoder or NimbusReactiveJwtDecode...