9.8
Critical
CVE-2024-22320 IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the…
Description
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Operational Decision Manager | 8.10.3 | No fix stated |
| operational_decision_manager | 8.10.3 | No fix stated |
Other CVEs of Operational Decision Manager
The 5 CVEs of Operational Decision Manager →
CVE-2026-18658
IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to…
9.8
Critical
CVE-2025-2824
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to…
7.4
High
CVE-2025-1551
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting
6.1
Medium
CVE-2024-22319
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to…
8.1
High