147825 matches found
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses cryptography which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses cryptography which is vulnerable to CVE-2026-69247, CVE-2026-69248, CVE-2026-69249. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses dompurify-3.4.8.tgz which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses dompurify-3.4.8.tgz which is vulnerable to CVE-2026-65898, CVE-2026-65899. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify before 3.4.11 fails to clone...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses multiple third-party libraries that are vulnerable to several security vulnerabilities. The CVE details are listed below in the Vulnerability Details section. This bulletin provides information about the affected components and the...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257.
Summary IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7 is vulnerable to...
Security Bulletin: IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185.
Summary IBM Edge Data Collector uses cmov-0.5.3.crate which is vulnerable to CVE-2026-50185. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-50185 DESCRIPTION: RustCrypto CMOV provides conditional move CPU intrinsics which are guaranteed on...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses brace-expansion-1.1.16.tgz which is vulnerable to multiple CVEs.
Summary IBM Maximo Application Suite - Monitor component uses brace-expansion-1.1.16.tgz which is vulnerable to CVE-2026-14257 and CVE-2026-69152. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-14257 DESCRIPTION: brace-expansion through 5.0.7...
Security Bulletin: SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-7769)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to SQL injection. Vulnerability Details CVEID:CVE-2026-7769 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling...
Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization
Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2025-68121 DESCRIPTION: During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244.
Summary IBM Maximo Application Suite - Monitor component uses adm-zip-0.5.16.tgz which is vulnerable to CVE-2026-39244. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-39244 DESCRIPTION: adm-zip before 0.5.18 is vulnerable to denial of service...
Security Bulletin: IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file (CVE-2026-1918)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to sensitive information in a log file. Vulnerability Details CVEID:CVE-2026-1918 DESCRIPTION: IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in DOMPurify. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify before 3.4.11 fails to clone the ALLOWEDATTR allowlist when setConfig is...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses js-yaml-4.1.1.tgz, tar-7.5.15.tgz, ujson-5.12.1-cp311-cp311-manylinux224x8664.manylinux228x8664.whl, decode-uri-component-0.2.2.tgz and body-parser-1.20.5.tgz which are vulnerable to CVE-2026-53550, CVE-2026-53655, CVE-2026-54911, CVE-2026-45822 and CVE-2026-12590...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses tomcat-embed-core-10.1.57, netty-codec-http2-4.2.15.Final.jar, mlflow-3.11.1-py3-none-any.whl, gitpython-3.1.49-py3-none-any.whl, docling-2.91.0-py3-none-any.whl, transformers-5.6.2-py3-none-any.whl, ip-address-10.2.0.tgz, bcutil-jdk18on-1.84.jar,...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses keras-3.14.1, bcprov-jdk18on-1.84.jar, sentencetransformers-5.2.0-py3-none-any.whl, pillow-12.2.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, tomcat-embed-core-10.1.55.jar, langgraphsdk-0.3.13-py3-none-any.whl, and transformers-4.57.5-py3-none-any.whl which...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses joserfc-1.6.4-py3-none-any.whl, HdrHistogram-2.2.2.jar, and logback-core-1.5.32.jar which are vulnerable to CVE-2026-62995, CVE-2026-14683, CVE-2026-14684, CVE-2026-10532, and CVE-2026-9828. This bulletin contains information regarding the vulnerability and its fix...
Security Bulletin: XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-36431)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed XSS vulnerability. Vulnerability Details CVEID:CVE-2025-36431 DESCRIPTION: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.01 is vulnerable to cross-site...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty
Summary SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-14976 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3...
Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-49268)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed a vulnerability caused by Apache Shiro. Vulnerability Details CVEID:CVE-2026-49268 DESCRIPTION: A remote attacker can inject LDAP special characters into the Distinguished Name DN construction in DefaultLdapRealm...
Security Bulletin: Multiple vulnerabilities that affects IBM Db2 Genius Hub
Summary The following dependency packages are being used by IBM Db2 Genius Hub had vulnerabilties which were resolved. - fastapi, follow-redirects, dompurify, bn.js, elliptic, form-data, js-yaml, poetry, golang.org/x/text, transformers, qs, langchain, brace-expansion, echarts, golang.org/x/sys,...
Security Bulletin: Security Vulnerability in Apache Shiro affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-23901, CVE-2026-23903)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Apache Shiro Vulnerability Details CVEID:CVE-2026-23903 DESCRIPTION: Authentication Bypass by Alternate Name vulnerability in Apache Shiro. This issue affects Apache Shiro: before 2.0.7. Users ar...