Lucene search
+L

37804 matches found

IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:22 p.m.•6 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) by vulnerability in github.com/slackhq/nebula package

Summary Impacted IBM optim 1.0.0, 1.1.0 optim-spark by vulnerability in github.com/slackhq/nebula package. IBM optim 1.2.0 resolves this vulnerability by upgrading the package from vulnerable version Vulnerability Details CVEID:CVE-2026-25793 DESCRIPTION: Nebula is a scalable overlay networking...

8.1CVSS5.8AI score0.00171EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:17 p.m.•7 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the package bind9.18-libs, bind9.18-utils.

Summary Impacted IBM optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the package bind9.18-libs, bind9.18-utils. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-1519 DESCRIPTION: If a BIND...

7.5CVSS7.1AI score0.01599EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:14 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in jackc/pgx

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package jackc/pgx that is affected by a critical-severity vulnerability. IBM Optim 2.0.0 resolves this vulnerability by upgrading the affected open-source dependency to fixed version. Vulnerability Details CVEID:CVE-2026-338...

5.8AI score0.00858EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:11 p.m.•8 views

Security Bulletin: Impacted IBM Optim 1.2.0  by vulnerabilities in scrapy

Summary IBM Optim version 1.2.0 depends on an open-source package scrapy which is affected by a high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependency to a fixed version. Vulnerability Details CVEID:CVE-2025-6176 DESCRIPTION:...

7.5CVSS7AI score0.00502EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:07 p.m.•8 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 impacted by a denial of service vulnerability in axios

Summary axios is used by IBM Optim as part of its front-end user interface for making HTTP requests from the browser. CVE-2026-25639, A denial of service vulnerability exists in axios prior to versions 0.30.3 and 1.13.5, where the mergeConfig function crashes with a TypeError when processing a...

7.5CVSS7.5AI score0.01765EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 5:03 p.m.•5 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) by vulnerabilities in crypto/x509 package.

Summary Impacted IBM optim 1.0.0, 1.1.0 optim-spark by vulnerabilities in crypto/x509 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-61729 DESCRIPTION: Within HostnameError.Error,...

6AI score0.00457EPSS
SaveExploits2Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:59 p.m.•5 views

Security Bulletin: IBM Optim 1.1.0 impacted by vulnerability in lodash-es 4.17.21

Summary IBM Optim 1.1.0 includes lodash-es 4.17.21 as an npm dependency in the archon-ui component. This version is affected by CVE-2025-13465, a prototype pollution vulnerability that allows a remote attacker to manipulate JavaScript object prototypes via specially crafted input, potentially...

7.9CVSS6.1AI score0.0185EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:56 p.m.•7 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by vulnerabilities in webkit2gtk3-jsc 2.50.4-1.el9_7, gstreamer1-plugins-base 1.22.12-4.el9, jetty-io 11.0.24, zookeeper 3.9.3, jackson-core 2.12.7, aircompressor 2.0.2, libtiff 4.4.0-1

Summary webkit2gtk3-jsc, gstreamer1-plugins-base, libtiff, and giflib are bundled with IBM Optim as part of its base OS image; Eclipse Jetty jetty-io is used for HTTP server infrastructure; Apache ZooKeeper zookeeper is used for distributed coordination; Jackson Core jackson-core is used for JSON...

8.8CVSS7.5AI score0.03457EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:52 p.m.•6 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 ,1.2.0 by vulnerabilities in the package google.golang.org/grpc

Summary Impacted IBM optim 1.0.0, 1.1.0 ,1.2.0 by vulnerabilities in the package google.golang.org/grpc. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-33186 DESCRIPTION: gRPC-Go is the Go...

9.1CVSS5.9AI score0.01625EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:50 p.m.•9 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by a vulnerability in Go's HTTP/2 transport

Summary BM Optim versions 1.0.0, 1.1.0, and 1.2.0 include the Go net/http package, which is affected by a high-severity denial-of-service vulnerability. IBM Optim 2.0.0 resolves this vulnerability by upgrading the affected Go dependency to a fixed version. Vulnerability Details CVEID:CVE-2026-338...

7.5CVSS5.8AI score0.00868EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:44 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in form-data 4.0.5

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source package axios which transitively depends on package form-data, which is affected by a high severity vulnerability. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed...

8.7CVSS5.9AI score0.00669EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:41 p.m.•6 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by XSS, open redirect, denial of service, and remote code execution vulnerabilities in react-router 7.7.0 / 7.12.0

Summary react-router is used by IBM Optim as part of its front-end user interface Optim UI to provide client-side and server-side routing for the web application. CVE-2026-33244 and CVE-2026-33245 are cross-site scripting XSS vulnerabilities in react-router's redirect and RSC handling;...

8.7CVSS6.9AI score0.00621EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:36 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in cloudflare/cfSSL

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package cloudflare/cfSSL that is affected by a medium-severity vulnerability. IBM Optim 2.0.0 resolves this vulnerability by removing the affected dependency. Vulnerability Details CVEID:CVE-2021-34558 DESCRIPTION: The...

6.5CVSS6.3AI score0.06975EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:33 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in nghttp2 and libarchive

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source packages nghttp2 and libarchive that are affected by three high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Detail...

7.5CVSS7.2AI score0.01073EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:28 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the packages picomatch-2.3.1.tgz.

Summary Impacted IBM Optim 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in the packages picomatch-2.3.1.tgz. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob...

7.5CVSS6.5AI score0.00507EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:21 p.m.•6 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 impacted by a denial of service vulnerability in quic-go

Summary quic-go github.com/quic-go/quic-go is used by IBM Optim as part of its network transport layer, providing a Go implementation of the QUIC protocol used for high-performance HTTP/3 communication.CVE-2025-59530 — A denial of service vulnerability exists in quic-go prior to version 0.54.1. A...

7.5CVSS5.8AI score0.00465EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 4:17 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 ( runtime, metadb, ui, spark) images by vulnerabilities in gnupg2 package

Summary Impacted IBM Optim 1.0.0, 1.1.0 runtime, metadb, ui, spark images by vulnerabilities in gnupg2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the packages to fixed versions 2.3.3-5.el97. Vulnerability Details CVEID:CVE-2025-68973 DESCRIPTION: In GnuPG before 2.4.9,...

7.8CVSS7.2AI score0.00152EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:22 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.2.0  by vulnerability in go.opentelemetry.io/otel/sdk

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package go.opentelemetry.io/otel/sdk which is affected by a high-severity vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source package to a fixed version. Vulnerability Details...

7CVSS5.8AI score0.00167EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:14 p.m.•7 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by vulnerabilities in glibc 2.34, netty-codec-http 4.1.x, ncurses 6.2, and net/http

Summary glibc, netty-codec-http, ncurses, and net/http are bundled with IBM Optim as OS base image and application runtime dependencies. CVE-2026-0861 is an integer overflow in glibc that may cause heap corruption; CVE-2025-58056 is an HTTP request smuggling flaw in Netty; CVE-2022-29458 is an...

7.5CVSS7.3AI score0.01341EPSS
SaveExploits3Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:09 p.m.•7 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop

Summary IBM Optim versions 1.0.0, 1.1.0, and 1.2.0 include open-source packages plexus-utils, OpenSSL, jose4j, Go net/url, and Apache Hadoop that are affected by five vulnerabilities ranging from high to medium-high severity, including path traversal, stack buffer overflow, denial-of-service via...

8.8CVSS8.9AI score0.52446EPSS
SaveExploits8Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 3:04 p.m.•5 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in netty-codec-http, Keycloak, LIBPNG

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include open-source packages netty-codec-http, Keycloak and LIBPNG that are affected by high-severity vulnerabilities. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to a fixed version...

8.7CVSS5.8AI score0.012EPSS
SaveExploits5Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:58 p.m.•8 views

Security Bulletin: Impacted IBM optim 1.0.0, 1.1.0 (optim-spark) images by vulnerabilities in github.com/caddyserver/caddy/v2 package

Summary Impacted IBM optim 1.0.0, 1.1.0 optim-spark images by vulnerabilities in github.com/caddyserver/caddy/v2 package. IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-27587 DESCRIPTION:...

9.1CVSS6AI score0.00541EPSS
SaveExploits2Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:55 p.m.•7 views

Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl.

Summary Multiple vulnerabilities in the curl/libcurl are related to reuse existing unencrypted connection CVE-2026-4873, credentials leakage CVE-2026-6253, CVE-2026-6429, CVE-2026-7168, cookies leakageCVE-2026-6276. Vulnerability Details CVEID:CVE-2026-4873 DESCRIPTION: A vulnerability exists whe...

7.5CVSS6.3AI score0.0075EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:44 p.m.•7 views

Security Bulletin: IBM Optim 1.0.0, 1.1.0 and 1.2.0 impacted by an information disclosure vulnerability in follow-redirects

Summary follow-redirects is used by IBM Optim as part of its front-end user interface Optim UI to handle HTTP and HTTPS redirect chains in the browser. CVE-2026-40895 is an information disclosure vulnerability in follow-redirects prior to version 1.16.0, where custom authentication headers e.g.,...

7.5CVSS7.1AI score0.0082EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:30 p.m.•5 views

Security Bulletin: Impacted IBM optim (spark) 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates

Summary Impacted IBM optim spark 1.0.0, 1.1.0, 1.2.0 by vulnerabilities in packages github.com/smallstep/certificates. IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-44005 DESCRIPTION: An...

10CVSS6AI score0.09091EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:26 p.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0  by vulnerabilities in uuid

Summary Security Bulletin:Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in uuid, IBM Optim 2.0.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of...

9.3CVSS6AI score0.00378EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 2:22 p.m.•6 views

Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent

Summary Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent, IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving...

5.9AI score0.00623EPSS
SaveExploits1Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:47 p.m.•7 views

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by an improper restriction of XML External Entity Reference vulnerability due to Apache CXF (CVE-2026-49875)

Summary There is a vulnerability in the Apache CXF library that affects IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, with the jaxrs-2.0, jaxrs-2.1, jaxws-2.2, xmlWS-3.0, xmlWS-4.0 or wsAtomicTransaction-1.2 enabled. Vulnerability Details Refer to t...

9.8CVSS6AI score0.00807EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:23 p.m.•9 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities

Summary Several vulnerabilities were found in DataStage on Cloud Pak for Data Vulnerability Details CVEID:CVE-2026-82101 DESCRIPTION: DataStage on Cloud Pak for Data could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. CWE:CWE-22: Imprope...

9.9CVSS8.1AI score0.01105EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:21 p.m.•10 views

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29181 DESCRIPTION: OpenTelemetry-Go is the Go implementation of OpenTelemetry. From 1.36.0 to 1.40.0, multi-value baggage: header extraction parses each...

8.7CVSS7AI score0.00973EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 1:04 p.m.•6 views

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

7.5CVSS5.7AI score0.0046EPSS
SaveExploits0Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 12:15 p.m.•6 views

Security Bulletin: IBM Financial Transaction Manager v4 is impacted by multiple vulnerabilities in WebSphere Application Server Liberty

Summary IBM Financial Transaction Manager for RedHat OpenShift has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-57819 DESCRIPTION: Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration...

9.8CVSS5.9AI score0.00732EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 12:00 p.m.•14 views

Security Bulletin: Multiple Vulnerabilities affect CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition.

Summary Due to the use of IBM® Runtime Environment Java™, CICS Transaction Gateway Desktop Edition and CICS Transaction Gateway for Multiplatforms are vulnerable to multiple vulnerabilities. CICS Transaction Gateway for Multiplatforms and CICS Transaction Gateway Desktop Edition have updated the...

9.8CVSS6.3AI score0.00481EPSS
SaveExploits1Affected Software2
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:54 a.m.•8 views

Security Bulletin: IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

Summary IBM Financial Transaction Manager FTM has addressed the following vulnerabilities. Vulnerability Details CVEID:CVE-2026-18173 DESCRIPTION: IBM Financial Transaction Manager FTM could allow a remote attacker to obtain sensitive information due to improper enforcement of mutual TLS...

8.2CVSS6.9AI score0.00302EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:39 a.m.•6 views

Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerability in jackc/pgx

Summary IBM Optim versions 1.0.0, 1.1.0 and 1.2.0 include an open-source package jackc/pgx PostgreSQL driver that is affected by a critical-severity SQL injection vulnerability. IBM Optim 2.0.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version...

9.8CVSS5.9AI score0.00488EPSS
SaveExploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 11:18 a.m.•5 views

Security Bulletin: Impacted IBM Optim 1.0.0 and 1.1.0  by vulnerabilities in Apache Tika PDF parser module

Summary IBM Optim versions 1.0.0 and 1.1.0 include open-source package Apache Tika that is affected by a critical vulnerability. IBM Optim 1.2.0 resolves this vulnerability by upgrading the affected open-source dependency to a fixed version. Vulnerability Details CVEID:CVE-2025-54988 DESCRIPTION:...

9.8CVSS8.3AI score0.88123EPSS
SaveExploits7Affected Software3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 10:17 a.m.•6 views

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-84274 DESCRIPTION: IBM Security Guardium Data Protection is affected by a sensitive information exposure vulnerability. During SECRET and APIKEY rotation processing, sensiti...

6AI score
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 10:16 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in form-data (CVE-2026-12143)

Summary An HTTP header injection vulnerability in the form-data multipart stream creation library CVE-2026-12143 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 4.0.6. Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION: form-data is a libra...

8.7CVSS5.8AI score0.00669EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 9:18 a.m.•5 views

Security Bulletin: IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ

Summary IBM Jazz for Service Management is affected by improper neutralization of input and incomplete authorization vulnerabilities in Apache ActiveMQ CVE-2026-42253, CVE-2026-46605 Vulnerability Details CVEID:CVE-2026-42253 DESCRIPTION: Improper Neutralization of Input During Web Page Generatio...

6.1CVSS5.7AI score0.00679EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 9:14 a.m.•6 views

Security Bulletin: Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms.

Summary Multiple security vulnerabilities may affect IBM WebSphere Liberty that is shipped with TXSeries for Multiplatforms. IBM WebSphere Liberty has been updated within TXSeries for Multiplatforms to address these vulnerabilities. Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM...

9.8CVSS6AI score0.0074EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 8:04 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Next.js (CVE-2026-44572, CVE-2026-44573)

Summary Multiple vulnerabilities including SSRF and header manipulation in Next.js CVE-2026-44572, CVE-2026-44573 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 15.5.21. Vulnerability Details CVEID:CVE-2026-44572 DESCRIPTION: Next.js is a Rea...

8.6CVSS6.3AI score0.01895EPSS
SaveExploits11Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 8:01 a.m.•8 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in Starlette (CVE-2026-54283)

Summary A resource exhaustion Denial of Service vulnerability in the Starlette ASGI framework library CVE-2026-54283 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.3.1. Vulnerability Details CVEID:CVE-2025-54121 DESCRIPTION: Starlette is a...

7.5CVSS6.4AI score0.07056EPSS
SaveExploits2Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:53 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in fast-uri (CVE-2026-6322)

Summary An IPv6 parsing validation bypass vulnerability in the fast-uri library CVE-2026-6322 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.1.5. Vulnerability Details CVEID:CVE-2026-6322 DESCRIPTION: fast-uri normalize decoded percent-encod...

7.5CVSS5.8AI score0.00675EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:49 a.m.•6 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in js-yaml (CVE-2026-59869)

Summary A Prototype Pollution vulnerability in the js-yaml document parsing library CVE-2026-59869 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 4.3.1. Vulnerability Details CVEID:CVE-2026-59869 DESCRIPTION: js-yaml is a JavaScript YAML parse...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:44 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in axios (CVE-2026-44486, CVE-2026-44487)

Summary Multiple proxy credential leakage vulnerabilities in the axios HTTP client library CVE-2026-44486, CVE-2026-44487 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 1.18.0. Vulnerability Details CVEID:CVE-2026-44486 DESCRIPTION: Axios is ...

8.7CVSS7.4AI score0.01041EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:21 a.m.•7 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in brace-expansion (CVE-2026-13149)

Summary A Denial of Service vulnerability in the brace-expansion string parsing library CVE-2026-13149 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 5.0.9. Vulnerability Details CVEID:CVE-2026-13149 DESCRIPTION: brace-expansion through 5.0.6 ...

8.7CVSS6.3AI score0.00364EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:17 a.m.•6 views

Security Bulletin: OpenPages is vulnerable to IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU plus three additional vulnerabilities

Summary IBM Semeru Runtime Quarterly CPU - Jul 2026 - Includes OpenJDK July 2026 CPU plus plus three additional vulnerabilities. CVE-2026-41254, CVE-2026-47057, CVE-2026-47063, CVE-2026-47058, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027, CVE-2026-47021, CVE-2026-46917, CVE-2026-47059,...

9.6CVSS5.7AI score0.00534EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 7:07 a.m.•8 views

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540)

Summary Multiple vulnerabilities in the python-multipart streaming parser library CVE-2026-24486, CVE-2026-40347, CVE-2026-42561, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32. Vulnerability Details CVEID:CVE-2026-40347...

8.6CVSS6.3AI score0.02239EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/21 6:20 a.m.•6 views

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate with watsonx Assistant Cartridge version 5.4.2 Vulnerability Details CVEID:CVE-2026-44897 DESCRIPTION: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.2.1, HTMLRenderer.heading builds the opening...

9.1CVSS6.3AI score0.00986EPSS
SaveExploits6Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/20 2:55 p.m.•6 views

Security Bulletin: IBM Event Endpoint Management is effected by Multiple Vulnerabilities

Summary IBM Event Endpoint Management is affected by Multiple Vulnerabilities and was addressed in IBM Event Endpoint Management 11.8.2 Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept extern...

9.3CVSS5AI score0.0058EPSS
SaveExploits2Affected Software1
Total number of security vulnerabilities37804