134817 matches found
Security Bulletin: IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185.
Summary IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-50185 DESCRIPTION: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257 and CVE-2026-69152. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7...
Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7769)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to SQL injection. Vulnerability Details CVEID:CVE-2026-7769 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling...
Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization
Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244.
Summary IBM Maximo Application Suite - Monitor component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-39244 DESCRIPTION: adm-zip before 0.5.18 is vulnerable to denial of service...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses js-yaml-4.1.1.tgz, tar-7.5.15.tgz, ujson-5.12.1-cp311-cp311-manylinux224x8664.manylinux228x8664.whl, decode-uri-component-0.2.2.tgz and body-parser-1.20.5.tgz which are vulnerable to CVE-2026-53550, CVE-2026-53655, CVE-2026-54911, CVE-2026-45822 and CVE-2026-12590...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses tomcat-embed-core-10.1.57, netty-codec-http2-4.2.15.Final.jar, mlflow-3.11.1-py3-none-any.whl, gitpython-3.1.49-py3-none-any.whl, docling-2.91.0-py3-none-any.whl, transformers-5.6.2-py3-none-any.whl, ip-address-10.2.0.tgz, bcutil-jdk18on-1.84.jar,...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses keras-3.14.1, bcprov-jdk18on-1.84.jar, sentencetransformers-5.2.0-py3-none-any.whl, pillow-12.2.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, tomcat-embed-core-10.1.55.jar, langgraphsdk-0.3.13-py3-none-any.whl, and transformers-4.57.5-py3-none-any.whl which...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses joserfc-1.6.4-py3-none-any.whl, HdrHistogram-2.2.2.jar, and logback-core-1.5.32.jar which are vulnerable to CVE-2026-62995, CVE-2026-14683, CVE-2026-14684, CVE-2026-10532, and CVE-2026-9828. This bulletin contains information regarding the vulnerability and its fix...
Security Bulletin: XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-36431)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability. Vulnerability Details CVEID:CVE-2025-36431 DESCRIPTION: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.01 is vulnerable to cross-site...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-14976 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3...
Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-49268)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed a vulnerability caused by Apache Shiro. Vulnerability Details CVEID:CVE-2026-49268 DESCRIPTION: A remote attacker can inject LDAP special characters into the Distinguished Name DN construction in DefaultLdapRealm...
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Summary The following dependency packages are being used by IBM Db2 Genius Hub had vulnerabilties which were resolved. - fastapi, follow-redirects, dompurify, bn.js, elliptic, form-data, js-yaml, poetry, golang.org/x/text, transformers, qs, langchain, brace-expansion, echarts, golang.org/x/sys,...
Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-23901, CVE-2026-23903)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Shiro Vulnerability Details CVEID:CVE-2026-23903 DESCRIPTION: Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users ar...
Security Bulletin: Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7362)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway could allow an authenticated user to obtain sensitive information that should only be available to a privileged user. Vulnerability Details CVEID:CVE-2026-7362 DESCRIPTION: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.12, and...
Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway
Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-16440 DESCRIPTION: In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault. CWE:CWE-674:...
Security Bulletin: IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty
Summary IBM SPSS Analytic Server is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...
Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.323 Vulnerability Details CVEID:CVE-2026-48776 DESCRIPTION: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python...