Lucene search
+L

37794 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:44 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in form-data 4.0.5

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source package axios which transitively depends on package form-data, which is affected by a high severity vulnerability. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed...

8.7CVSS5.9AI score0.00669EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:41 p.m.•6 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by XSS, open redirect, denial of service, and remote code execution vulnerabilities in react-router 7.7.0 / 7.12.0

Summary react-router is used by IBM Optim as part of its front-end user interface Optim UI to provide client-side and server-side routing for the web application. CVE-2026-33244 and CVE-2026-33245 are cross-site scripting XSS vulnerabilities in react-router's redirect and RSC handling;...

8.7CVSS6.9AI score0.00621EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:36 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in cloudflare/cfSSL

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package cloudflare/cfSSL that is affected by a medium-severity vulnerability. IBM Optim 2.0.0 resolves this vulnerability by removing the affected dependency. Vulnerability Details CVEID:CVE-2021-34558 DESCRIPTION: The...

6.5CVSS6.3AI score0.06975EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:33 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in nghttp2 and libarchive

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source packages nghttp2 and libarchive that are affected by three high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Detail...

7.5CVSS7.2AI score0.01073EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:28 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the packages picomatch-2.3.1.tgz.

Summary Impacted IBM Optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the packages picomatch-2.3.1.tgz. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob...

7.5CVSS6.5AI score0.00507EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:21 p.m.•5 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 impacted by a denial of service vulnerability in quic-go

Summary quic-go github.com/quic-go/quic-go is used by IBM Optim as part of its network transport layer, providing a Go implementation of the QUIC protocol used for high-performance HTTP/3 communication.CVE-2025-59530 — A denial of service vulnerability exists in quic-go prior to version 0.54.1. A...

7.5CVSS5.8AI score0.00465EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:17 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 ( runtime, metadb, ui, spark) images by vulnerabilities in gnupg2 package

Summary Impacted IBM Optim 1.0.0, 1.1.0 runtime, metadb, ui, spark images by vulnerabilities in gnupg2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the packages to fixed versions 2.3.3-5.el97. Vulnerability Details CVEID:CVE-2025-68973 DESCRIPTION: In GnuPG before 2.4.9,...

7.8CVSS7.2AI score0.00152EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:22 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.2.0  by vulnerability in go.opentelemetry.io/otel/sdk

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package go.opentelemetry.io/otel/sdk which is affected by a high-severity vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source package to a fixed version. Vulnerability Details...

7CVSS5.8AI score0.00167EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:14 p.m.•7 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by vulnerabilities in glibc 2.34, netty-codec-http 4.1.x, ncurses 6.2, and net/http

Summary glibc, netty-codec-http, ncurses, and net/http are bundled with IBM Optim as OS base image and application runtime dependencies. CVE-2026-0861 is an integer overflow in glibc that may cause heap corruption; CVE-2025-58056 is an HTTP request smuggling flaw in Netty; CVE-2022-29458 is an...

7.5CVSS7.3AI score0.01341EPSS
SaveExploits3Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:09 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop

Summary IBM Optim versions 1.0.0, 1.1.0, and 1.2.0 include open-source packages plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop that are affected by five vulnerabilities ranging from high to medium-high severity, including path traversal, stack buffer overflow, denial-of-service via...

8.8CVSS8.9AI score0.52446EPSS
SaveExploits8Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:04 p.m.•5 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in netty-codec-http, Keycloak, LIBPNG

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source packages netty-codec-http, Keycloak and LIBPNG that are affected by high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to a fixed version...

8.7CVSS5.8AI score0.012EPSS
SaveExploits5Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:58 p.m.•8 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) images by vulnerabilities in github.com/caddyserver/caddy/v2 package

Summary Impacted IBM optim 1.0.0, 1.1.0 optim-spark images by vulnerabilities in github.com/caddyserver/caddy/v2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-27587 DESCRIPTION:...

9.1CVSS6AI score0.00541EPSS
SaveExploits2Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:55 p.m.•7 views

Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl.

Summary Multiple vulnerabilities in the curl/libcurl are related to reuse existing unencrypted connection CVE-2026-4873, credentials leakage CVE-2026-6253, CVE-2026-6429, CVE-2026-7168, cookies leakageCVE-2026-6276. Vulnerability Details CVEID:CVE-2026-4873 DESCRIPTION: A vulnerability exists whe...

7.5CVSS6.3AI score0.0075EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:44 p.m.•7 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by an information disclosure vulnerability in follow-redirects

Summary follow-redirects is used by IBM Optim as part of its front-end user interface Optim UI to handle HTTP and HTTPS redirect chains in the browser. CVE-2026-40895 is an information disclosure vulnerability in follow-redirects prior to version 1.16.0, where custom authentication headers e.g.,...

7.5CVSS7.1AI score0.0082EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:30 p.m.•5 views

Security Bulletin: Impacted IBM optim (spark) 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates

Summary Impacted IBM optim spark 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-44005 DESCRIPTION: An...

10CVSS6AI score0.09091EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:26 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in uuid

Summary Security Bulletin:Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in uuid, IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of...

9.3CVSS6AI score0.00378EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:22 p.m.•6 views

Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent

Summary Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent, IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving...

5.9AI score0.00623EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:47 p.m.•7 views

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to t...

9.8CVSS6AI score0.00807EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:23 p.m.•8 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities

Summary Several vulnerabilities were found in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-82101 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. CWE:CWE-22: Imprope...

9.9CVSS8.1AI score0.0108EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:21 p.m.•10 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29181 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each...

8.7CVSS7AI score0.00973EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:04 p.m.•6 views

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 12:15 p.m.•6 views

Security Bulletin: IBM Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Application Server Liberty

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-57819 DESCRIPTION: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration...

9.8CVSS5.9AI score0.00732EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 12:00 p.m.•14 views

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

9.8CVSS6.3AI score0.00481EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:54 a.m.•8 views

Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Summary IBM Financial Transaction Manager FTM has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-18173 DESCRIPTION: IBM Financial Transaction Manager FTM could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS...

8.2CVSS6.9AI score0.00302EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:39 a.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerability in jackc/pgx

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package jackc/pgx PostgreSQL driver that is affected by a critical-severity SQL injection vulnerability. IBM Optim 2.0.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version...

9.8CVSS5.9AI score0.00488EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:18 a.m.•5 views

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.1.0  by vulnerabilities in Apache Tika PDF parser module

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package Apache Tika that is affected by a critical vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version. Vulnerability Details CVEID:CVE-2025-54988 DESCRIPTION:...

9.8CVSS8.3AI score0.88123EPSS
SaveExploits7Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 10:17 a.m.•6 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84274 DESCRIPTION: IBM Security Guardium Data Protection is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensiti...

6AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 10:16 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in form-data (CVE-2026-12143)

Summary An HTTP header injection vulnerability in the form-data multipart stream creation library CVE-2026-12143 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 4.0.6. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a libra...

8.7CVSS5.8AI score0.00669EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 9:18 a.m.•5 views

Security Bulletin: IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ

Summary IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ CVE-2026-42253, CVE-2026-46605 Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input During Web Page Generatio...

6.1CVSS5.7AI score0.00679EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 9:14 a.m.•6 views

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms. IBM WebSphere Liberty has been updated within TXSeries for Multiplatforms to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM...

9.8CVSS6AI score0.0074EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 8:04 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Next.js (CVE-2026-44572, CVE-2026-44573)

Summary Multiple vulnerabilities including SSRF and header manipulation in Next.js CVE-2026-44572, CVE-2026-44573 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 15.5.21. Vulnerability Details CVEID:CVE-2026-44572 DESCRIPTION: Next.js is a Rea...

8.6CVSS6.3AI score0.01895EPSS
SaveExploits11Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 8:01 a.m.•8 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Starlette (CVE-2026-54283)

Summary A resource exhaustion Denial of Service vulnerability in the Starlette ASGI framework library CVE-2026-54283 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2025-54121 DESCRIPTION: Starlette is a...

7.5CVSS6.4AI score0.07056EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:53 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-6322)

Summary An IPv6 parsing validation bypass vulnerability in the fast-uri library CVE-2026-6322 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.1.5. Vulnerability Details CVEID:CVE-2026-6322 DESCRIPTION: fast-uri normalize decoded percent-encod...

7.5CVSS5.8AI score0.00675EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:49 a.m.•6 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in js-yaml (CVE-2026-59869)

Summary A Prototype Pollution vulnerability in the js-yaml document parsing library CVE-2026-59869 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 4.3.1. Vulnerability Details CVEID:CVE-2026-59869 DESCRIPTION: js-yaml is a JavaScript YAML parse...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:44 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-44486, CVE-2026-44487)

Summary Multiple proxy credential leakage vulnerabilities in the axios HTTP client library CVE-2026-44486, CVE-2026-44487 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.18.0. Vulnerability Details CVEID:CVE-2026-44486 DESCRIPTION: Axios is ...

8.7CVSS7.4AI score0.01041EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:21 a.m.•6 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in brace-expansion (CVE-2026-13149)

Summary A Denial of Service vulnerability in the brace-expansion string parsing library CVE-2026-13149 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 5.0.9. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 ...

8.7CVSS6.3AI score0.00364EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:17 a.m.•6 views

Security Bulletin: OpenPages is vulnerable to IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU plus three additional vulnerabilities

Summary IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU plus plus three additional vulnerabilities. CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059,...

9.6CVSS5.7AI score0.00534EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:07 a.m.•8 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540)

Summary Multiple vulnerabilities in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerability Details CVEID:CVE-2026-40347...

8.6CVSS6.3AI score0.02239EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 6:20 a.m.•6 views

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.2 Vulnerability Details CVEID:CVE-2026-44897 DESCRIPTION: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading builds the opening...

9.1CVSS6.3AI score0.00986EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/20 2:55 p.m.•6 views

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

9.3CVSS5AI score0.0058EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/20 2:54 p.m.•5 views

Security Bulletin: IBM Operator for Apache Flink is affected by Multiple Vulnerabilities

Summary IBM Operator for Apache Flink is affected by Multiple Vulnerabilities and was addressed in BM Operator for Apache Flink 1.5.5 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname...

8.1CVSS5.5AI score0.01226EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/20 2:49 p.m.•6 views

Security Bulletin: IBM Event Processing is affected by Multiple vulnerabilities

Summary IBM Event Processing is affected by Multiple vulnerabilities and were addressed in IBM Event Processing version 1.5.5 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output...

9.3CVSS5.6AI score0.00856EPSS
SaveExploits3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/20 2:16 p.m.•5 views

Security Bulletin: Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 4.0

Summary Multiple vulnerabilities addressed in IBM Big Replicate LiveData Migrator 4.0. The libraries affected include tomcat-embed-core-9.0.110.jar, i18next-http-backend-2.2.0.tgz, spring-web-5.3.39.jar, assertj-core-3.22.0.jar, ability-6.4.0.tgz, netty-codec-http-4.1.128.Final.jar,...

7.5CVSS7.5AI score0.01177EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 3:46 p.m.•8 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect WebSphere Service Registry and Repository due to August 2026 CPU

Summary There are multiple vulnerabilities in IBM SDK Java Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in August 2026. These issues are also addressed by WebSphere Application Server shipped with WebSphere...

6.8CVSS5.9AI score0.0031EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 3:38 p.m.•14 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-50009, CVE-2026-44894)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-50009 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to version 4.2.15.Final, Netty QUIC exposes the stateless...

7.5CVSS5.9AI score0.00324EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 3:36 p.m.•11 views

Security Bulletin: IBM Guardium Data Protection is affected by vulnerability (CVE-2026-84249)

Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-84249 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...

6.5AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 2:37 p.m.•5 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...

9.8CVSS6.5AI score0.00803EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 2:34 p.m.•5 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2025-66506 DESCRIPTION: Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity. Prior to...

7.5CVSS6AI score0.00457EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 2:30 p.m.•6 views

Security Bulletin: Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog and IBM Master Data Management Neo4j On Cloud Pak for Data

Summary Multiple Vulnerabilities in Java affecting IBM Knowledge Catalog Neo4j On Cloud Pak for Data Multiple Vulnerabilities in Java affectingIBM Master Data Management Neo4j On Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-70906 DESCRIPTION: Easily exploitable vulnerability allows...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/18 12:30 p.m.•7 views

Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM Java SDK

Summary IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to IBM Java SDK. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is...

9.8CVSS5.9AI score0.00534EPSS
SaveExploits1Affected Software2
Total number of security vulnerabilities37794