Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-8355 (GCVE-0-2026-8355)

Vulnerability from nvd – Published: 2026-10-19 23:42 – Updated: 2026-10-19 23:42

Title

IBM ContextForge MCP Gateway is affected by server-side request forgery

Summary

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.

Severity

No CVSS data available.

CWE

CWE-918 - Server-Side request forgery (SSRF)

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7285723	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	ContextForge MCP Gateway	Affected: 0.1.0 , ≤ 1.0.5 (semver) cpe:2.3:a:ibm:contextforge_mcp_gateway::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ContextForge MCP Gateway",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.0.5",
              "status": "affected",
              "version": "0.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:contextforge_mcp_gateway:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.0.5",
                  "versionStartIncluding": "0.1.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.\u003c/p\u003e"
            }
          ],
          "value": "IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side request forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:42:01.778Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7285723"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now.\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eProduct(s)\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eVersion(s) number and/or range\u00a0\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eRemediation/Fix/Instructions\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eIBM ContextForge MCP Gateway\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e2.0\u0026gt;=v1.0.6\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eUpgrade to v1.0.6 or later. See release notes:\u00a0\u003ca href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29\" rel=\"nofollow\"\u003ehttps://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6\u003c/a\u003e\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n2.0\u003e=v1.0.6Upgrade to v1.0.6 or later. See release notes:\u00a0 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29"
        }
      ],
      "title": "IBM ContextForge MCP Gateway is affected by server-side request forgery",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003eIf an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\u003c/div\u003e\u003cbr/\u003e\u003cdiv\u003e- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\u003c/div\u003e\u003cdiv\u003e- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003cdiv\u003eIBM strongly recommends upgrading to the fixed version as soon as possible.\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "If an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\n\n\n- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\n\n- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\n\n\n\nIBM strongly recommends upgrading to the fixed version as soon as possible."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-8355",
    "datePublished": "2026-10-19T23:42:01.778Z",
    "dateReserved": "2026-05-11T17:24:26.842Z",
    "dateUpdated": "2026-10-19T23:42:01.778Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109126 (GCVE-0-2026-109126)

Vulnerability from nvd – Published: 2026-10-19 23:43 – Updated: 2026-10-19 23:43

Title

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

Summary

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-798 - Use of Hard-coded Credentials

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292606	vendor-advisorypatch

Impacted products

2 products

Vendor	Product	Version
IBM	Verify Identity Access	Affected: 11.0.3.1 cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:::::::*
IBM	Security Verify Access	Affected: 10.0.9.3 cpe:2.3:a:ibm:security_verify_access:10.0.9.3:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:*:*:*:*:*:*:*"
          ],
          "product": "Verify Identity Access",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.3.1"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:ibm:security_verify_access:10.0.9.3:*:*:*:*:*:*:*"
          ],
          "product": "Security Verify Access",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.\u003c/p\u003e"
            }
          ],
          "value": "IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:43:19.165Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292606"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cstrong\u003eIBM encourages customers to update their systems promptly.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eAppliance:\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eAffected Products\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eFix availability\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Verify Identity Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm%2FTivoli%2FIBM+Verify+Identity+Access\u0026amp;fixids=11.0.3-ISS-IVIA-FP0002\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Verify Identity Access v11.0.3.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Security Verify Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Security+Verify+Access\u0026amp;fixids=10.0.9-ISS-ISVA-FP0004\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Security Verify Access v10.0.9.4\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/thead\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\nAppliance:\n\n\n\nAffected Products\n\n\n\nFix availability\n\n\n\nIBM Verify Identity Access\n\n\n\n Download IBM Verify Identity Access v11.0.3.2 https://www.ibm.com/support/fixcentral/swg/selectFix \n\n\n\nIBM Security Verify Access\n\n\n\n Download IBM Security Verify Access v10.0.9.4 https://www.ibm.com/support/fixcentral/swg/selectFixes"
        }
      ],
      "title": "IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-109126",
    "datePublished": "2026-10-19T23:43:19.165Z",
    "dateReserved": "2026-10-12T10:05:10.706Z",
    "dateUpdated": "2026-10-19T23:43:19.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107400 (GCVE-0-2026-107400)

Vulnerability from nvd – Published: 2026-10-19 23:46 – Updated: 2026-10-19 23:46

Title

Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

Summary

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-287 - Improper Authentication

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292418	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	TRIRIGA Application Platform	Affected: 5.0.0 , ≤ 5.0.8 (semver) cpe:2.3:a:ibm:tririga_application_platform:5.0.0:::::::* cpe:2.3:a:ibm:tririga_application_platform:5.0.8:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:*"
          ],
          "product": "TRIRIGA Application Platform",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "5.0.8",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.\u003c/p\u003e"
            }
          ],
          "value": "IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:46:46.720Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292418"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eReference :\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\n\n\n\n\n\n\n\nReference :\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026release=5.0.9\u0026platform=All\u0026function=all"
        }
      ],
      "title": "Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-107400",
    "datePublished": "2026-10-19T23:46:46.720Z",
    "dateReserved": "2026-10-07T21:08:36.177Z",
    "dateUpdated": "2026-10-19T23:46:46.720Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107366 (GCVE-0-2026-107366)

Vulnerability from nvd – Published: 2026-10-19 23:49 – Updated: 2026-10-19 23:49

Title

Langflow OSS Authorization Bypass Through User-Controlled Key

Summary

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.

Severity

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7293016	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Langflow OSS	Affected: 1.0.0 , ≤ 1.12.4 (semver) cpe:2.3:a:ibm:langflow_oss:1.0.0:::::::* cpe:2.3:a:ibm:langflow_oss:1.12.4:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*"
          ],
          "product": "Langflow OSS",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.\u003c/p\u003e"
            }
          ],
          "value": "IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:49:23.120Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7293016"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading \u003ca href=\"https://pypi.org/project/langflow/1.12.5/\" rel=\"nofollow\"\u003eLangflow OSS to version 1.12.5.\u003c/a\u003e\u003c/p\u003e\u003cp\u003eFor Langflow OSS versions 1.0.0 - 1.12.4, follow the \u003ca href=\"https://docs.langflow.org/release-notes\" rel=\"nofollow\"\u003ePrepare to upgrade instructions and release-specific configuration changes\u003c/a\u003e, including backing up your existing installation, then follow the \u003ca href=\"https://docs.langflow.org/get-started-installation\" rel=\"nofollow\"\u003eLangflow OSS installation instructions\u003c/a\u003e to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\u003c/p\u003e\u003cp\u003eThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading  Langflow OSS to version 1.12.5. https://pypi.org/project/langflow/1.12.5/ \n\n\n\nFor Langflow OSS versions 1.0.0 - 1.12.4, follow the  Prepare to upgrade instructions and release-specific configuration changes https://docs.langflow.org/release-notes , including backing up your existing installation, then follow the  Langflow OSS installation instructions https://docs.langflow.org/get-started-installation  to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\n\n\n\nThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes."
        }
      ],
      "title": "Langflow OSS Authorization Bypass Through User-Controlled Key",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\u003c/p\u003e\u003cp\u003eSet \u003ccode\u003eLANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true\u003c/code\u003e to reject direct shell-script execution, and set \u003ccode\u003eLANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true\u003c/code\u003e to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\u003c/p\u003e\u003cp\u003eFor public workflows, retain the default restriction on custom components. Explicitly enabling \u003ccode\u003eLANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS\u003c/code\u003e permits custom component execution and changes the default protection described for CVE-2026-18894.\u003c/p\u003e\u003cp\u003eFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\n\n\n\nSet LANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true to reject direct shell-script execution, and set LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\n\n\n\nFor public workflows, retain the default restriction on custom components. Explicitly enabling LANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS permits custom component execution and changes the default protection described for CVE-2026-18894.\n\n\n\nFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-107366",
    "datePublished": "2026-10-19T23:49:23.120Z",
    "dateReserved": "2026-10-07T20:49:16.611Z",
    "dateUpdated": "2026-10-19T23:49:23.120Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-105453 (GCVE-0-2026-105453)

Vulnerability from nvd – Published: 2026-10-19 23:56 – Updated: 2026-10-19 23:56

Title

IBM Sterling Connect:Direct for Unix Improper Privilege Management

Summary

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE

CWE-269 - Improper Privilege Management

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292735	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Sterling Connect Direct for Unix	Affected: 6.3.0.0 , ≤ 6.3.0.7 (semver) Affected: 6.4.0.0 , ≤ 6.4.0.6 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:::::unix::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"
          ],
          "product": "Sterling Connect Direct for Unix",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "6.3.0.7",
              "status": "affected",
              "version": "6.3.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.0.6",
              "status": "affected",
              "version": "6.4.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u0026nbsp;6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.\u003c/p\u003e"
            }
          ],
          "value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:56:21.017Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292735"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix029\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix020\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on  Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
        }
      ],
      "title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-105453",
    "datePublished": "2026-10-19T23:56:06.910Z",
    "dateReserved": "2026-10-05T13:57:37.099Z",
    "dateUpdated": "2026-10-19T23:56:21.017Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19178 (GCVE-0-2026-19178)

Vulnerability from nvd – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Race Condition

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292610	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:34.565Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292610"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Race Condition"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-19178",
    "datePublished": "2026-10-19T22:50:34.565Z",
    "dateReserved": "2026-08-06T17:11:52.486Z",
    "dateUpdated": "2026-10-19T22:50:34.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36252 (GCVE-0-2025-36252)

Vulnerability from nvd – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Insufficient Session Expiration

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-613 - Insufficient Session Expiration

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292611	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-613",
              "description": "CWE-613 Insufficient Session Expiration",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:46.164Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292611"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Insufficient Session Expiration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36252",
    "datePublished": "2026-10-19T22:50:46.164Z",
    "dateReserved": "2025-04-15T21:16:44.887Z",
    "dateUpdated": "2026-10-19T22:50:46.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36069 (GCVE-0-2025-36069)

Vulnerability from nvd – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Insufficient Session Expiration

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-613 - Insufficient Session Expiration

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292613	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-613",
              "description": "CWE-613 Insufficient Session Expiration",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:54.345Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292613"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/a\u003e.\u00a0\u003c/em\u003e\u003c/p\u003e\u003cp\u003eAll future releases will include the fix for this vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Insufficient Session Expiration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36069",
    "datePublished": "2026-10-19T22:50:54.345Z",
    "dateReserved": "2025-04-15T21:16:12.198Z",
    "dateUpdated": "2026-10-19T22:50:54.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36061 (GCVE-0-2025-36061)

Vulnerability from nvd – Published: 2026-10-19 22:51 – Updated: 2026-10-19 22:51

Title

TS4500 Tape Library Denial of Service

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292612	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:51:04.688Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292612"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Denial of Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36061",
    "datePublished": "2026-10-19T22:51:04.688Z",
    "dateReserved": "2025-04-15T21:16:12.197Z",
    "dateUpdated": "2026-10-19T22:51:04.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-6719 (GCVE-0-2026-6719)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 18:02

Title

IBM Concert Software Use of Insufficiently Random Values

Summary

IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 18:02 UTC

CWE

CWE-330 - Use of Insufficiently Random Values

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6719",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:02:32.967291Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:02:41.810Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-330",
              "description": "CWE-330 Use of Insufficiently Random Values",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:08.395Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Use of Insufficiently Random Values"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-6719",
    "datePublished": "2026-10-19T17:17:08.395Z",
    "dateReserved": "2026-04-20T19:28:44.845Z",
    "dateUpdated": "2026-10-19T18:02:41.810Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4418 (GCVE-0-2026-4418)

Vulnerability from nvd – Published: 2026-10-19 17:39 – Updated: 2026-10-19 18:12

Title

IBM Cloud Pak System HTML Injection

Summary

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 18:12 UTC

CWE

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7290183	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak System	Affected: 2.3.6.0 Affected: 2.3.6.1 cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:::::::* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4418",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:12:03.915143Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:12:10.504Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.6.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim\u0027s Web browser within the security context of the hosting site.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed in the victim\u0027s Web browser within the security context of the hosting site."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:39:41.586Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290183"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003eupgrading to 2.3.6.2\u003c/a\u003e.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software and\u00a0 IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/pages/node/7284365\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 \n\n\n\n\n\n\n\n\n\n\n\nFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product."
        }
      ],
      "title": "IBM Cloud Pak System HTML Injection"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-4418",
    "datePublished": "2026-10-19T17:39:41.586Z",
    "dateReserved": "2026-03-19T03:20:24.677Z",
    "dateUpdated": "2026-10-19T18:12:10.504Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4413 (GCVE-0-2026-4413)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 17:57

Title

IBM Concert Software Cross-Site Scripting

Summary

IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 17:57 UTC

CWE

CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4413",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T17:57:04.398823Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T17:57:13.032Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:18.567Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-4413",
    "datePublished": "2026-10-19T17:17:18.567Z",
    "dateReserved": "2026-03-19T02:44:08.632Z",
    "dateUpdated": "2026-10-19T17:57:13.032Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-4405 (GCVE-0-2026-4405)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 18:23

Title

IBM Concert Software Use of Web Browser Cache Containing Sensitive Information

Summary

IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.

Severity

4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 18:23 UTC

CWE

CWE-525 - Use of Web Browser Cache Containing Sensitive Information

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-4405",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:23:08.762889Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:23:21.592Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-525",
              "description": "CWE-525 Use of Web Browser Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:27.412Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Use of Web Browser Cache Containing Sensitive Information"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-4405",
    "datePublished": "2026-10-19T17:17:27.412Z",
    "dateReserved": "2026-03-18T19:47:28.284Z",
    "dateUpdated": "2026-10-19T18:23:21.592Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3628 (GCVE-0-2026-3628)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 17:17

Title

IBM Concert Software Information Disclosure

Summary

IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-209 - Generation of Error Message Containing Sensitive Information

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-209",
              "description": "CWE-209 Generation of Error Message Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:36.917Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Information Disclosure"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3628",
    "datePublished": "2026-10-19T17:17:36.917Z",
    "dateReserved": "2026-03-06T02:46:50.549Z",
    "dateUpdated": "2026-10-19T17:17:36.917Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3303 (GCVE-0-2026-3303)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 17:17

Title

IBM Concert Software Permissive Cross-domain Security Policy

Summary

IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE

CWE-942 - Permissive Cross-domain Security Policy with Untrusted Domains

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-942",
              "description": "CWE-942 Permissive Cross-domain Security Policy with Untrusted Domains",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:45.343Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Permissive Cross-domain Security Policy"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3303",
    "datePublished": "2026-10-19T17:17:45.343Z",
    "dateReserved": "2026-02-26T20:38:02.721Z",
    "dateUpdated": "2026-10-19T17:17:45.343Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3295 (GCVE-0-2026-3295)

Vulnerability from nvd – Published: 2026-10-19 17:39 – Updated: 2026-10-19 18:18

Title

IBM Cloud Pak System Cross-Site Scripting

Summary

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing malicious JavaScript which are saved within the app and later executed automatically when user views affected pages, resulting in Stored Cross‑Site Scripting (Stored XSS).

Severity

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 18:18 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7290183	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak System	Affected: 2.3.6.0 Affected: 2.3.6.1 cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:::::::* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:18:00.784142Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:18:43.531Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.6.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user\u2011supplied input is not properly sanitized or HTML\u2011encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing malicious JavaScript which are saved within the app and later executed automatically when user views affected pages, resulting in Stored Cross\u2011Site Scripting (Stored XSS).\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user\u2011supplied input is not properly sanitized or HTML\u2011encoded before being stored and rendered. An authenticated attacker could exploit this vulnerability by entering specially crafted payloads containing malicious JavaScript which are saved within the app and later executed automatically when user views affected pages, resulting in Stored Cross\u2011Site Scripting (Stored XSS)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:39:49.804Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290183"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003eupgrading to 2.3.6.2\u003c/a\u003e.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software and\u00a0 IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/pages/node/7284365\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 \n\n\n\n\n\n\n\n\n\n\n\nFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product."
        }
      ],
      "title": "IBM Cloud Pak System Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3295",
    "datePublished": "2026-10-19T17:39:49.804Z",
    "dateReserved": "2026-02-26T19:38:12.909Z",
    "dateUpdated": "2026-10-19T18:18:43.531Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3161 (GCVE-0-2026-3161)

Vulnerability from nvd – Published: 2026-10-19 17:39 – Updated: 2026-10-19 17:39

Title

IBM Cloud Pak System Risky Cryptographic Algorithm

Summary

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7290183	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak System	Affected: 2.3.6.0 Affected: 2.3.6.1 cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:::::::* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.6.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327 Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:39:57.551Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290183"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003eupgrading to 2.3.6.2\u003c/a\u003e.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software and\u00a0 IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/pages/node/7284365\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 \n\n\n\n\n\n\n\n\n\n\n\nFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product."
        }
      ],
      "title": "IBM Cloud Pak System Risky Cryptographic Algorithm"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-3161",
    "datePublished": "2026-10-19T17:39:57.551Z",
    "dateReserved": "2026-02-24T21:09:16.552Z",
    "dateUpdated": "2026-10-19T17:39:57.551Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1510 (GCVE-0-2026-1510)

Vulnerability from nvd – Published: 2026-10-19 17:17 – Updated: 2026-10-19 18:01

Title

IBM Concert Software Improper Clearing of Heap Memory

Summary

IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.

Severity

4.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 18:01 UTC

CWE

CWE-244 - Improper Clearing of Heap Memory Before Release ('Heap Inspection')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1510",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T18:01:11.325513Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T18:01:35.430Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-244",
              "description": "CWE-244 Improper Clearing of Heap Memory Before Release (\u0027Heap Inspection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:17:53.903Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Improper Clearing of Heap Memory"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-1510",
    "datePublished": "2026-10-19T17:17:53.903Z",
    "dateReserved": "2026-01-27T21:30:23.224Z",
    "dateUpdated": "2026-10-19T18:01:35.430Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-1501 (GCVE-0-2026-1501)

Vulnerability from nvd – Published: 2026-10-19 17:18 – Updated: 2026-10-19 17:53

Title

IBM Concert Software Improper Certificate Validation

Summary

IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.

Severity

3.7 (Low)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-19 17:53 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292374	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Concert	Affected: 1.0.0 , ≤ 3.0.0 (semver) cpe:2.3:a:ibm:concert::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-1501",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-19T17:53:34.866315Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-19T17:53:40.919Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Concert",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "3.0.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:concert:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.0.0",
                  "versionStartIncluding": "1.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation.\u003c/p\u003e"
            }
          ],
          "value": "IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:18:00.687Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292374"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\u003c/p\u003e\u003cp\u003eDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (\u003ca href=\"https://myibm.ibm.com/products-services/containerlibrary\" rel=\"noopener noreferrer nofollow\"\u003eICR\u003c/a\u003e) and follow\u00a0\u003ca href=\"https://www.ibm.com/docs/en/concert?topic=installing-preparing-run-installs-from-private-container-registry\" rel=\"noopener noreferrer nofollow\"\u003einstallation instructions\u003c/a\u003e\u00a0depending on the type of deployment.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing these vulnerabilities now by upgrading to IBM Concert Software 3.0.1.1\nDownload IBM Concert Software 3.0.1.1 from Container software library section of IBM Entitled Registry (ICR) and follow installation instructions depending on the type of deployment."
        }
      ],
      "title": "IBM Concert Software Improper Certificate Validation"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-1501",
    "datePublished": "2026-10-19T17:18:00.687Z",
    "dateReserved": "2026-01-27T18:13:28.964Z",
    "dateUpdated": "2026-10-19T17:53:40.919Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-38375 (GCVE-0-2023-38375)

Vulnerability from nvd – Published: 2026-10-19 17:40 – Updated: 2026-10-19 17:40

Title

IBM Cloud Pak System Cross-Site Scripting

Summary

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7290183	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak System	Affected: 2.3.6.0 Affected: 2.3.6.1 cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:::::::* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.6.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:40:04.905Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290183"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003eupgrading to 2.3.6.2\u003c/a\u003e.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software and\u00a0 IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/pages/node/7284365\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 \n\n\n\n\n\n\n\n\n\n\n\nFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product."
        }
      ],
      "title": "IBM Cloud Pak System Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-38375",
    "datePublished": "2026-10-19T17:40:04.905Z",
    "dateReserved": "2023-07-16T00:53:28.841Z",
    "dateUpdated": "2026-10-19T17:40:04.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-105453 (GCVE-0-2026-105453)

Vulnerability from cvelistv5 – Published: 2026-10-19 23:56 – Updated: 2026-10-19 23:56

Title

IBM Sterling Connect:Direct for Unix Improper Privilege Management

Summary

IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.

Severity

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE

CWE-269 - Improper Privilege Management

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292735	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Sterling Connect Direct for Unix	Affected: 6.3.0.0 , ≤ 6.3.0.7 (semver) Affected: 6.4.0.0 , ≤ 6.4.0.6 (semver) cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:::::unix:: cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:::::unix::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.0:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.3.0.7:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.0:*:*:*:*:unix:*:*",
            "cpe:2.3:a:ibm:sterling_connect_direct:6.4.0.6:*:*:*:*:unix:*:*"
          ],
          "product": "Sterling Connect Direct for Unix",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "6.3.0.7",
              "status": "affected",
              "version": "6.3.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.0.6",
              "status": "affected",
              "version": "6.4.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u0026nbsp;6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management.\u003c/p\u003e"
            }
          ],
          "value": "IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and\u00a06.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege management."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:56:21.017Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292735"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eProduct\u003c/td\u003e\u003ctd\u003eVersion\u003c/td\u003e\u003ctd\u003eRemediation/Fix/Instructions\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.3.0.0 - 6.3.0.7.iFix029\u003c/td\u003e\u003ctd\u003eApply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.3.0.7\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.3.0.7*iFix033*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eIBM Sterling Connect:Direct for Unix\u003c/td\u003e\u003ctd\u003e6.4.0.0 - 6.4.0.6.iFix020\u003c/td\u003e\u003ctd\u003eApply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on \u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7EOther%20software\u0026amp;product=ibm/Other+software/Sterling+Connect%3ADirect+for+UNIX\u0026amp;release=6.4.0.6\u0026amp;platform=All\u0026amp;function=fixId\u0026amp;fixids=6.4.0.6*iFix025*\u0026amp;includeSupersedes=0\" rel=\"noopener noreferrer nofollow\"\u003eFix Central\u003c/a\u003e.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading\n\nProductVersionRemediation/Fix/InstructionsIBM Sterling Connect:Direct for Unix6.3.0.0 - 6.3.0.7.iFix029Apply 6.3.0.7.iFix030, included in 6.3.0.7.iFix033 available on\u00a0 Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes .IBM Sterling Connect:Direct for Unix6.4.0.0 - 6.4.0.6.iFix020Apply 6.4.0.6.iFix021, included in 6.4.0.6.iFix025 available on  Fix Central https://www.ibm.com/support/fixcentral/swg/selectFixes ."
        }
      ],
      "title": "IBM Sterling Connect:Direct for Unix Improper Privilege Management"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-105453",
    "datePublished": "2026-10-19T23:56:06.910Z",
    "dateReserved": "2026-10-05T13:57:37.099Z",
    "dateUpdated": "2026-10-19T23:56:21.017Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107366 (GCVE-0-2026-107366)

Vulnerability from cvelistv5 – Published: 2026-10-19 23:49 – Updated: 2026-10-19 23:49

Title

Langflow OSS Authorization Bypass Through User-Controlled Key

Summary

IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.

Severity

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

CWE

CWE-639 - Authorization Bypass Through User-Controlled Key

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7293016	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Langflow OSS	Affected: 1.0.0 , ≤ 1.12.4 (semver) cpe:2.3:a:ibm:langflow_oss:1.0.0:::::::* cpe:2.3:a:ibm:langflow_oss:1.12.4:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:langflow_oss:1.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:langflow_oss:1.12.4:*:*:*:*:*:*:*"
          ],
          "product": "Langflow OSS",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.4",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID.\u003c/p\u003e"
            }
          ],
          "value": "IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user\u0027s messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-639",
              "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:49:23.120Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7293016"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends addressing the vulnerability now by upgrading \u003ca href=\"https://pypi.org/project/langflow/1.12.5/\" rel=\"nofollow\"\u003eLangflow OSS to version 1.12.5.\u003c/a\u003e\u003c/p\u003e\u003cp\u003eFor Langflow OSS versions 1.0.0 - 1.12.4, follow the \u003ca href=\"https://docs.langflow.org/release-notes\" rel=\"nofollow\"\u003ePrepare to upgrade instructions and release-specific configuration changes\u003c/a\u003e, including backing up your existing installation, then follow the \u003ca href=\"https://docs.langflow.org/get-started-installation\" rel=\"nofollow\"\u003eLangflow OSS installation instructions\u003c/a\u003e to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\u003c/p\u003e\u003cp\u003eThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by upgrading  Langflow OSS to version 1.12.5. https://pypi.org/project/langflow/1.12.5/ \n\n\n\nFor Langflow OSS versions 1.0.0 - 1.12.4, follow the  Prepare to upgrade instructions and release-specific configuration changes https://docs.langflow.org/release-notes , including backing up your existing installation, then follow the  Langflow OSS installation instructions https://docs.langflow.org/get-started-installation  to install version 1.12.5 and test your flows. For deployments using MCP stdio, also apply the configuration controls in Workarounds and Mitigations.\n\n\n\nThis bulletin also discloses fixes delivered in prior releases: CVE-2026-107366 was fixed in version 1.9.0; CVE-2026-18894 was fixed in version 1.11.2; and CVE-2026-77817 was fixed in version 1.11.5. Version 1.12.5 includes these fixes."
        }
      ],
      "title": "Langflow OSS Authorization Bypass Through User-Controlled Key",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\u003c/p\u003e\u003cp\u003eSet \u003ccode\u003eLANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true\u003c/code\u003e to reject direct shell-script execution, and set \u003ccode\u003eLANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true\u003c/code\u003e to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\u003c/p\u003e\u003cp\u003eFor public workflows, retain the default restriction on custom components. Explicitly enabling \u003ccode\u003eLANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS\u003c/code\u003e permits custom component execution and changes the default protection described for CVE-2026-18894.\u003c/p\u003e\u003cp\u003eFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported.\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends applying the following configuration controls to deployments using MCP stdio in addition to upgrading Langflow OSS to version 1.12.5. These controls do not replace the upgrade.\n\n\n\nSet LANGFLOW_MCP_SERVER_INTERPRETER_HARDENING=true to reject direct shell-script execution, and set LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY=true to block non-admin MCP stdio access. Restart the Langflow service after updating its environment configuration. These restrictions can require changes to existing MCP server launch configurations and limit which users can use MCP stdio.\n\n\n\nFor public workflows, retain the default restriction on custom components. Explicitly enabling LANGFLOW_ALLOW_PUBLIC_CUSTOM_COMPONENTS permits custom component execution and changes the default protection described for CVE-2026-18894.\n\n\n\nFor CVE-2026-77817, upgrading prevents the identified secret disclosure in new flow and project exports. Revoke or rotate any credentials exposed in previously exported files; upgrading does not remove secrets from copies already exported."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-107366",
    "datePublished": "2026-10-19T23:49:23.120Z",
    "dateReserved": "2026-10-07T20:49:16.611Z",
    "dateUpdated": "2026-10-19T23:49:23.120Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-107400 (GCVE-0-2026-107400)

Vulnerability from cvelistv5 – Published: 2026-10-19 23:46 – Updated: 2026-10-19 23:46

Title

Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication

Summary

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-287 - Improper Authentication

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292418	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	TRIRIGA Application Platform	Affected: 5.0.0 , ≤ 5.0.8 (semver) cpe:2.3:a:ibm:tririga_application_platform:5.0.0:::::::* cpe:2.3:a:ibm:tririga_application_platform:5.0.8:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:tririga_application_platform:5.0.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:tririga_application_platform:5.0.8:*:*:*:*:*:*:*"
          ],
          "product": "TRIRIGA Application Platform",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "5.0.8",
              "status": "affected",
              "version": "5.0.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.\u003c/p\u003e"
            }
          ],
          "value": "IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:46:46.720Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292418"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eReference :\u003c/p\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026amp;product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026amp;release=5.0.9\u0026amp;platform=All\u0026amp;function=all\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "Customers using affected versions of IBM TRIRIGA should upgrade to IBM TRIRIGA Application Platform 5.0.9 or a later supported release containing the fix. IBM recommends applying the latest available maintenance to ensure protection against this vulnerability.\n\n\n\n\n\n\n\nReference :\n\n\n\n https://www.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm%7ETivoli\u0026product=ibm/Tivoli/IBM+TRIRIGA+Application+Platform\u0026release=5.0.9\u0026platform=All\u0026function=all"
        }
      ],
      "title": "Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-107400",
    "datePublished": "2026-10-19T23:46:46.720Z",
    "dateReserved": "2026-10-07T21:08:36.177Z",
    "dateUpdated": "2026-10-19T23:46:46.720Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-109126 (GCVE-0-2026-109126)

Vulnerability from cvelistv5 – Published: 2026-10-19 23:43 – Updated: 2026-10-19 23:43

Title

IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials

Summary

IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-798 - Use of Hard-coded Credentials

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292606	vendor-advisorypatch

Impacted products

2 products

Vendor	Product	Version
IBM	Verify Identity Access	Affected: 11.0.3.1 cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:::::::*
IBM	Security Verify Access	Affected: 10.0.9.3 cpe:2.3:a:ibm:security_verify_access:10.0.9.3:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:verify_identity_access:11.0.3.1:*:*:*:*:*:*:*"
          ],
          "product": "Verify Identity Access",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "11.0.3.1"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:ibm:security_verify_access:10.0.9.3:*:*:*:*:*:*:*"
          ],
          "product": "Security Verify Access",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "10.0.9.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.\u003c/p\u003e"
            }
          ],
          "value": "IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:43:19.165Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292606"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cstrong\u003eIBM encourages customers to update their systems promptly.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003cstrong\u003eAppliance:\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eAffected Products\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003cstrong\u003eFix availability\u003c/strong\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Verify Identity Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFix?product=ibm%2FTivoli%2FIBM+Verify+Identity+Access\u0026amp;fixids=11.0.3-ISS-IVIA-FP0002\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Verify Identity Access v11.0.3.2\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cp\u003eIBM Security Verify Access\u003c/p\u003e\u003c/td\u003e\u003ctd\u003e\u003cp\u003e\u003ca href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Security+Verify+Access\u0026amp;fixids=10.0.9-ISS-ISVA-FP0004\u0026amp;source=SAR\u0026amp;function=fixId\u0026amp;parent=IBM%20Security\" rel=\"nofollow\"\u003eDownload IBM Security Verify Access v10.0.9.4\u003c/a\u003e\u003c/p\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/thead\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM encourages customers to update their systems promptly.\n\n\n\n\n\n\n\nAppliance:\n\n\n\nAffected Products\n\n\n\nFix availability\n\n\n\nIBM Verify Identity Access\n\n\n\n Download IBM Verify Identity Access v11.0.3.2 https://www.ibm.com/support/fixcentral/swg/selectFix \n\n\n\nIBM Security Verify Access\n\n\n\n Download IBM Security Verify Access v10.0.9.4 https://www.ibm.com/support/fixcentral/swg/selectFixes"
        }
      ],
      "title": "IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-109126",
    "datePublished": "2026-10-19T23:43:19.165Z",
    "dateReserved": "2026-10-12T10:05:10.706Z",
    "dateUpdated": "2026-10-19T23:43:19.165Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-8355 (GCVE-0-2026-8355)

Vulnerability from cvelistv5 – Published: 2026-10-19 23:42 – Updated: 2026-10-19 23:42

Title

IBM ContextForge MCP Gateway is affected by server-side request forgery

Summary

IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.

Severity

No CVSS data available.

CWE

CWE-918 - Server-Side request forgery (SSRF)

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7285723	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	ContextForge MCP Gateway	Affected: 0.1.0 , ≤ 1.0.5 (semver) cpe:2.3:a:ibm:contextforge_mcp_gateway::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ContextForge MCP Gateway",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.0.5",
              "status": "affected",
              "version": "0.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:ibm:contextforge_mcp_gateway:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.0.5",
                  "versionStartIncluding": "0.1.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters.\u003c/p\u003e"
            }
          ],
          "value": "IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform arbitrary HTTP POST requests to internal network resources and cloud metadata endpoints. The vulnerability occurs during OAuth-enabled gateway registration when the system fails to validate the oauth_config.token_url parameter. When registering a gateway with OAuth client credentials authentication, an attacker can supply a malicious token_url pointing to internal services, cloud metadata endpoints (AWS IMDSv1, GCP, Azure), or localhost-bound services. The application immediately performs an HTTP POST request to the attacker-controlled URL with form-encoded credentials in the body. If the response cannot be parsed as a valid OAuth token response, up to 256 characters of the response body are reflected back to the attacker in the HTTP 502 error message. This vulnerability bypasses existing SSRF protections that are applied to the gateway.url field but not to OAuth configuration parameters."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side request forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T23:42:01.778Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7285723"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now.\u003c/strong\u003e\u003c/p\u003e\u003cdiv\u003e\u003ctable\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003e\u003cstrong\u003eProduct(s)\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eVersion(s) number and/or range\u00a0\u003c/strong\u003e\u003c/td\u003e\u003ctd\u003e\u003cstrong\u003eRemediation/Fix/Instructions\u003c/strong\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eIBM ContextForge MCP Gateway\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003ctd\u003e2.0\u0026gt;=v1.0.6\u003c/td\u003e\u003ctd\u003e\u003cdiv\u003e\u003cdiv\u003eUpgrade to v1.0.6 or later. See release notes:\u00a0\u003ca href=\"https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29\" rel=\"nofollow\"\u003ehttps://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6\u003c/a\u003e\u003c/div\u003e\u003c/div\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now.\n\nProduct(s)Version(s) number and/or range\u00a0Remediation/Fix/InstructionsIBM ContextForge MCP Gateway\n\n\n\n2.0\u003e=v1.0.6Upgrade to v1.0.6 or later. See release notes:\u00a0 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6 https://github.com/IBM/mcp-context-forge/releases/tag/v1.0.6%29"
        }
      ],
      "title": "IBM ContextForge MCP Gateway is affected by server-side request forgery",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cdiv\u003eIf an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\u003c/div\u003e\u003cbr/\u003e\u003cdiv\u003e- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\u003c/div\u003e\u003cdiv\u003e- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\u003c/div\u003e\u003c/div\u003e\u003cdiv\u003e\u003cdiv\u003eIBM strongly recommends upgrading to the fixed version as soon as possible.\u003c/div\u003e\u003c/div\u003e"
            }
          ],
          "value": "If an immediate upgrade to v1.0.6 is not possible, restrict access to the gateway registration API:\n\n\n- Remove the `gateways.create` permission from the `developer` role or any role assigned to untrusted users.\n\n- Enforce network-level egress controls (firewall / security group rules) to block outbound HTTP/HTTPS from the gateway host to cloud metadata addresses (`169.254.254.169/32`, `fd00:ec2::254/128`), RFC 1918 ranges, and loopback (`127.0.0.0/8`).\n\n\n\nIBM strongly recommends upgrading to the fixed version as soon as possible."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-8355",
    "datePublished": "2026-10-19T23:42:01.778Z",
    "dateReserved": "2026-05-11T17:24:26.842Z",
    "dateUpdated": "2026-10-19T23:42:01.778Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36061 (GCVE-0-2025-36061)

Vulnerability from cvelistv5 – Published: 2026-10-19 22:51 – Updated: 2026-10-19 22:51

Title

TS4500 Tape Library Denial of Service

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292612	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:51:04.688Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292612"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Denial of Service"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36061",
    "datePublished": "2026-10-19T22:51:04.688Z",
    "dateReserved": "2025-04-15T21:16:12.197Z",
    "dateUpdated": "2026-10-19T22:51:04.688Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36069 (GCVE-0-2025-36069)

Vulnerability from cvelistv5 – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Insufficient Session Expiration

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CWE

CWE-613 - Insufficient Session Expiration

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292613	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-613",
              "description": "CWE-613 Insufficient Session Expiration",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:54.345Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292613"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/a\u003e.\u00a0\u003c/em\u003e\u003c/p\u003e\u003cp\u003eAll future releases will include the fix for this vulnerability.\u003c/p\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Insufficient Session Expiration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36069",
    "datePublished": "2026-10-19T22:50:54.345Z",
    "dateReserved": "2025-04-15T21:16:12.198Z",
    "dateUpdated": "2026-10-19T22:50:54.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-36252 (GCVE-0-2025-36252)

Vulnerability from cvelistv5 – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Insufficient Session Expiration

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.

Severity

6.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-613 - Insufficient Session Expiration

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292611	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 6.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-613",
              "description": "CWE-613 Insufficient Session Expiration",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:46.164Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292611"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Insufficient Session Expiration"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2025-36252",
    "datePublished": "2026-10-19T22:50:46.164Z",
    "dateReserved": "2025-04-15T21:16:44.887Z",
    "dateUpdated": "2026-10-19T22:50:46.164Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19178 (GCVE-0-2026-19178)

Vulnerability from cvelistv5 – Published: 2026-10-19 22:50 – Updated: 2026-10-19 22:50

Title

TS4500 Tape Library Race Condition

Summary

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7292610	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Storage TS4500 Library	Affected: 1.1.1.6 , ≤ 1.12.0.3 (semver) cpe:2.3:h:ibm:storage_ts4500_library::::::::

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Storage TS4500 Library",
          "vendor": "IBM",
          "versions": [
            {
              "lessThanOrEqual": "1.12.0.3",
              "status": "affected",
              "version": "1.1.1.6",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:ibm:storage_ts4500_library:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "1.12.0.3",
                  "versionStartIncluding": "1.1.1.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.\u003c/p\u003e"
            }
          ],
          "value": "IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T22:50:34.565Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7292610"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eFor the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, \u003cem\u003eavailable from IBM Fix Central \u003c/em\u003e\u003ca href=\"http://www-933.ibm.com/support/fixcentral/\" rel=\"noopener noreferrer nofollow\"\u003e\u003cem\u003ehttp://www-933.ibm.com/support/fixcentral/\u003c/em\u003e\u003c/a\u003e\u003cem\u003e.\u00a0\u003c/em\u003e\u003c/div\u003e\u003cdiv\u003e\u003c/div\u003e\u003cdiv\u003eAll future releases will include the fix for this vulnerability.\u003c/div\u003e"
            }
          ],
          "value": "For the 1.12.0 release, upgrade to firmware version 1.12.0.4 Fix Pack or later, available from IBM Fix Central  http://www-933.ibm.com/support/fixcentral/ http://www-933.ibm.com/support/fixcentral/ .\u00a0\n\n\n\nAll future releases will include the fix for this vulnerability."
        }
      ],
      "title": "TS4500 Tape Library Race Condition"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2026-19178",
    "datePublished": "2026-10-19T22:50:34.565Z",
    "dateReserved": "2026-08-06T17:11:52.486Z",
    "dateUpdated": "2026-10-19T22:50:34.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2023-38375 (GCVE-0-2023-38375)

Vulnerability from cvelistv5 – Published: 2026-10-19 17:40 – Updated: 2026-10-19 17:40

Title

IBM Cloud Pak System Cross-Site Scripting

Summary

IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

ibm CNA under the mitre root

CNA scorecard B 88/100 over 1278 records in the last 180 days details

References

1 reference

URL	Tags
https://www.ibm.com/support/pages/node/7290183	vendor-advisorypatch

Impacted products

1 product

Vendor	Product	Version
IBM	Cloud Pak System	Affected: 2.3.6.0 Affected: 2.3.6.1 cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:::::::* cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:ibm:cloud_pak_system:2.3.6.1:*:*:*:*:*:*:*"
          ],
          "product": "Cloud Pak System",
          "vendor": "IBM",
          "versions": [
            {
              "status": "affected",
              "version": "2.3.6.0"
            },
            {
              "status": "affected",
              "version": "2.3.6.1"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.\u003c/p\u003e"
            }
          ],
          "value": "IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T17:40:04.905Z",
        "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
        "shortName": "ibm"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory",
            "patch"
          ],
          "url": "https://www.ibm.com/support/pages/node/7290183"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003e\u003cp\u003e\u003cstrong\u003eIBM strongly recommends addressing the vulnerability now by \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003eupgrading to 2.3.6.2\u003c/a\u003e.\u003c/strong\u003e\u003c/p\u003e\u003cp\u003eThis Security bulletin applies to IBM Cloud Pak System, IBM Cloud Pak System Software and\u00a0 IBM Cloud Pak System Software Suite.\u003c/p\u003e\u003cp\u003eInformation on upgrading here \u003ca href=\"https://www.ibm.com/support/pages/node/7284365\" rel=\"nofollow\"\u003ehttps://www.ibm.com/support/pages/node/7284365\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003c/div\u003e\u003c/div\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product.\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "IBM strongly recommends addressing the vulnerability now by  https://www.ibm.com/support/pages/node/7284365 \n\n\n\n\n\n\n\n\n\n\n\nFor unsupported versions the recommendation is\u00a0 to upgrade to supported version of the product."
        }
      ],
      "title": "IBM Cloud Pak System Cross-Site Scripting"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
    "assignerShortName": "ibm",
    "cveId": "CVE-2023-38375",
    "datePublished": "2026-10-19T17:40:04.905Z",
    "dateReserved": "2023-07-16T00:53:28.841Z",
    "dateUpdated": "2026-10-19T17:40:04.905Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Find a vulnerability

Search criteria

20330 vulnerabilities by IBM

CVE-2026-8355 (GCVE-0-2026-8355)

CVE-2026-109126 (GCVE-0-2026-109126)

CVE-2026-107400 (GCVE-0-2026-107400)

CVE-2026-107366 (GCVE-0-2026-107366)

CVE-2026-105453 (GCVE-0-2026-105453)

CVE-2026-19178 (GCVE-0-2026-19178)

CVE-2025-36252 (GCVE-0-2025-36252)

CVE-2025-36069 (GCVE-0-2025-36069)

CVE-2025-36061 (GCVE-0-2025-36061)

CVE-2026-6719 (GCVE-0-2026-6719)

CVE-2026-4418 (GCVE-0-2026-4418)

CVE-2026-4413 (GCVE-0-2026-4413)

CVE-2026-4405 (GCVE-0-2026-4405)

CVE-2026-3628 (GCVE-0-2026-3628)

CVE-2026-3303 (GCVE-0-2026-3303)

CVE-2026-3295 (GCVE-0-2026-3295)

CVE-2026-3161 (GCVE-0-2026-3161)

CVE-2026-1510 (GCVE-0-2026-1510)

CVE-2026-1501 (GCVE-0-2026-1501)

CVE-2023-38375 (GCVE-0-2023-38375)

CVE-2026-105453 (GCVE-0-2026-105453)

CVE-2026-107366 (GCVE-0-2026-107366)

CVE-2026-107400 (GCVE-0-2026-107400)

CVE-2026-109126 (GCVE-0-2026-109126)

CVE-2026-8355 (GCVE-0-2026-8355)

CVE-2025-36061 (GCVE-0-2025-36061)

CVE-2025-36069 (GCVE-0-2025-36069)

CVE-2025-36252 (GCVE-0-2025-36252)

CVE-2026-19178 (GCVE-0-2026-19178)

CVE-2023-38375 (GCVE-0-2023-38375)