9.8
Critique
CVE-2026-18658 IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to…
Description
IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Operational Decision Manager | 9.6.0.0 | Pas de correctif indiqué |
| Operational Decision Manager 9.5 | 9.5.0.0 → 9.5.0.1 | Pas de correctif indiqué |
| Operational Decision Manager | 9.0.0.1 | Pas de correctif indiqué |
| Operational Decision Manager | 8.12.0.1 | Pas de correctif indiqué |
| Operational Decision Manager 8.11 | 8.11.0.1 → 8.11.1.0 | Pas de correctif indiqué |
Autres CVE de Operational Decision Manager
Les 5 CVE de Operational Decision Manager →
CVE-2025-2824
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to…
7.4
Élevée
CVE-2025-1551
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting
6.1
Moyenne
CVE-2024-22320
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the…
9.8
Critique
CVE-2024-22319
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to…
8.1
Élevée