9.8
Critical
CVE-2026-18658 IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to…
Description
IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Operational Decision Manager | 9.6.0.0 | No fix stated |
| Operational Decision Manager 9.5 | 9.5.0.0 → 9.5.0.1 | No fix stated |
| Operational Decision Manager | 9.0.0.1 | No fix stated |
| Operational Decision Manager | 8.12.0.1 | No fix stated |
| Operational Decision Manager 8.11 | 8.11.0.1 → 8.11.1.0 | No fix stated |
Other CVEs of Operational Decision Manager
The 5 CVEs of Operational Decision Manager →
CVE-2025-2824
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to…
7.4
High
CVE-2025-1551
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting
6.1
Medium
CVE-2024-22320
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the…
9.8
Critical
CVE-2024-22319
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to…
8.1
High