Security Bulletin: Vulnerable Version of Software in Use

Summary Prior versions include vulnerable version of openssl. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact...

PT-2026-53945

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 13.0.1.0 through 13.0.7.2 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.26 IBM Integration Bus for z/OS versions 10.1.0.0 through 10.1.0.7 Description SQL injection allows a remote attacker to...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Directory Traversal due to plexus-utils (CVE-2025-67030)

Summary IBM App Connect Enterprise Toolkit and IBM Integration Bus for z/OS Toolkit are vulnerable to Directory Traversal due to plexus-utils. Vulnerability Details CVEID:CVE-2025-67030 DESCRIPTION: Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Incorrect Calculation of Buffer Size due to IBM Java (CVE-2026-1188)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Incorrect Calculation of Buffer Size due to IBM Java. Vulnerability Details CVEID:CVE-2026-1188 DESCRIPTION: In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14667)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

IBM Db2 Denial of Service Vulnerability (CNVD-2026-14668)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Improper Neutralization of Input Terminators due to Jakarta Mail (CVE-2025-7962)

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Improper Neutralization of Input Terminators due to Jakarta Mail. Vulnerability Details CVEID:CVE-2025-7962 DESCRIPTION: In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \...

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle(CVE-2025-8916 & CVE-2025-8885)

Summary IBM App Connect Enterprise runtime and IBM Integration Bus for z/OS are vulnerable to Allocation of Resources Without Limits or Throttling due to Bouncy Castle. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

IBM Db2 Denial of Service Vulnerability (CNVD-2025-29175)

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. A denial of service vulnerability exists in IBM Db2, which can be exploited by an attacker to cause a...

CVE-2025-36156 IBM InfoSphere Data Replication VSAM for z/OS Remote Source code execution

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2025-59476 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

CVE-2025-36014

IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with access to the IIB install directory...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...

IBM Db2 security vulnerabilities

IBM Db2 is a relational database management system from International Business Machines IBM. The system's execution environments are mainly UNIX, Linux, IBMi, z/OS, and Windows server versions. IBM Db2 suffers from a denial of service vulnerability that can be exploited by an attacker to cause a...

org.jenkins-ci.main:jenkins-test-harness (1.608), org.jenkins-ci.main:jenkins-war (1.608) +4 more potentially affected by CVE-2024-47803 via org.jenkins-ci.main:jenkins-core (1.608)

org.jenkins-ci.main:jenkins-core MAVEN version 1.608 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.608 - org.jenkins-ci.main:jenkins-war 1.608 -...