IBM
Monthly
Improper input validation in the STRPCCMD CL command handling of IBM i Access Client Solutions (IBM i Access Family 1.1.2.0 through 1.1.9.15) lets an authenticated IBM i user inject and execute arbitrary operating-system commands on the machine running the ACS client, using only that user's normal privileges. IBM rated the issue CVSS 6.3 (AV:N/AC:L/PR:L/UI:N, low confidentiality/integrity/availability impact) and classifies it as OS command injection (CWE-78). There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is not confirmed as active.
IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 enforce authorization for certain administrative user interface components only on the client side, so an attacker who already holds a valid low-privileged account can cause the browser to render admin-only UI elements that should have been hidden. The result is a limited information disclosure (CVSS 4.3, C:L, no integrity or availability impact) rather than full administrative takeover, and no public exploit code or CISA KEV entry was identified in the supplied intelligence. Because the flaw is a missing server-side authorization check (CWE-285), any authenticated user of the affected deployment can probe it trivially with low attack complexity.
Authenticated HTML injection in IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 lets a logged-in user plant unescaped markup in the management interface, so the product renders attacker-controlled content as trusted UI. The result is UI spoofing and phishing: a crafted page can impersonate legitimate Sterling Secure Proxy screens to harvest credentials or trick operators into unsafe actions, with limited confidentiality and integrity impact (CVSS 5.4). No public exploit code has been identified and the flaw is not listed in CISA KEV; the vendor has published a fix, though an exact fixed version is not named in the provided data.
Stored cross-site scripting in IBM Cognos Analytics 12.0.4 through 12.0.4 FP2 and 12.1.0 through 12.1.3 FP1 allows any authenticated non-privileged user to embed JavaScript in their own given name or surname profile fields. The payload is later rendered without encoding in the administrative user-account management panel, so the script executes in an administrator's browser session when that account's permissions are reviewed, potentially exposing the administrator's session cookies. The issue is rated CVSS 5.4 (medium) and a vendor patch is available; no public exploit code or CISA KEV entry was present in the provided intelligence, so active exploitation is not confirmed.
Improper cache key isolation in IBM Langflow OSS versions 1.0.0 through 1.11.5 allows an authenticated attacker to read and potentially manipulate another user's MCP (Model Context Protocol) server context by exploiting shared cache entries that are not scoped to individual user sessions. The MCP Tools component fails to include sufficient user-identity signals in cache keys, permitting cross-user context leakage. A vendor patch is available and no public exploit or KEV listing has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.10.2 enables unauthenticated remote attackers to coerce the application server into issuing arbitrary outbound HTTP requests. Exploiting this flaw, an attacker can probe internal network topology, reach cloud metadata endpoints (e.g., AWS IMDSv1), or use the server as a proxy to bypass network access controls. No public exploit code or CISA KEV listing has been identified at time of analysis, and IBM has released a patch via their support portal.
Server-side request forgery in IBM Langflow OSS versions 1.0.0 through 1.11.2 allows authenticated network attackers to induce the server to issue unauthorized HTTP requests to arbitrary destinations, enabling internal network enumeration or use of the server as a proxy to reach otherwise-isolated services. The vulnerability is classified as CWE-918 and is confirmed by IBM with a patch available at the vendor support page. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.5 permits unauthenticated remote attackers to cause the application server to issue arbitrary outbound HTTP requests. The primary risk is internal network enumeration - mapping services, ports, and hosts reachable from the Langflow deployment that are otherwise inaccessible to the external attacker - and potential use as a pivot to reach internal APIs or cloud metadata endpoints. No public exploit code exists and the CVE is not in the CISA KEV catalog; IBM has issued a patch via its support portal.
Missing origin validation in IBM Verify Identity Access and Security Verify Access (including their container editions) lets an unauthenticated, remote attacker ride an authenticated user's live session and carry out operations as that victim, potentially enabling follow-on attacks against the deployment. Exploitation requires the victim - a logged-in Verify Identity Access / Security Verify Access user - to be lured into visiting attacker-controlled web content while their session is active (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, 5.4), so confidentiality and integrity impact is limited to the victim's own privilege scope with no availability loss. No public exploit code has been identified and the flaw is not confirmed actively exploited (CISA KEV); EPSS is 0.15% (4th percentile), and vendor-released fixes are available per IBM's advisory, making this a moderate-severity, likely low-priority issue in real-world terms.
Cross-site scripting (CWE-79) in IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, including the corresponding container editions, allows a remote unauthenticated attacker to run script in the browser of a logged-in user who follows a crafted link, potentially hijacking an authenticated session or performing actions as that user. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), which reflects the need for victim interaction and the limited but scope-changing confidentiality and integrity impact typical of reflected XSS. There is no public exploit code identified at time of analysis, no confirmed active exploitation (not in CISA KEV), and the EPSS probability is only 0.20% (10th percentile), so this is a patching-hygiene issue rather than an emergency response item.
An open redirect flaw in IBM Verify Identity Access and Security Verify Access (including their container editions) lets a remote, unauthenticated attacker craft a link pointing at the product's own trusted domain that silently forwards the victim to an attacker-controlled site. Because the URL originates from the legitimate IBM identity provider, the redirect is highly convincing and can be used to harvest credentials or push further phishing stages. IBM has released fixes (Interim Fix 001 for the affected 10.0.0–10.0.9.2 and 11.0.0–11.0.3 streams); there is no public exploit identified at time of analysis, exploitation requires the victim to click a crafted link, and EPSS is very low at 0.19% (9th percentile).
HTTP request smuggling in IBM WebSphere Application Server 8.5 and 9.0 (including the Liberty variant) enables unauthenticated remote attackers to manipulate shared HTTP caches, circumvent web application firewall rules, and inject malicious scripts into responses served to other users. The root cause is improper parsing of the HTTP Transfer-Encoding request header (CWE-444), a class of vulnerability that exploits disagreement between a front-end proxy and the back-end application server over where one HTTP request ends and the next begins. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available.
Open redirect (CWE-601) in IBM WebSphere Application Server 9.0, 8.5, and Liberty enables remote attackers to conduct phishing campaigns by crafting URLs hosted on the trusted WebSphere origin that silently forward victims to attacker-controlled sites. The vulnerability requires no authentication from the attacker but does depend on social engineering to lure victims into visiting the crafted URL. Successful exploitation allows credential harvesting, further targeted attacks, or brand abuse against organizations relying on WebSphere's trusted domain reputation. No public exploit or CISA KEV listing has been identified at time of analysis.
HTTP request smuggling in IBM WebSphere Application Server 8.5, 9.0, and Liberty allows remote unauthenticated attackers to poison web caches, bypass web application firewall protections, and conduct cross-site scripting attacks by sending specially crafted Transfer-Encoding headers. The root cause is CWE-444, inconsistent interpretation of HTTP request boundaries between WebSphere and a frontend proxy component. No public exploit or confirmed active exploitation has been identified at time of analysis; a vendor patch is available from IBM.
Blind server-side request forgery (SSRF) in IBM WebSphere Application Server 8.5 and 9.0 enables authenticated remote attackers to issue arbitrary internal HTTP requests by embedding malicious URLs within crafted SOAP messages processed by the server. Although the response is not directly returned to the attacker ('blind' SSRF), an adversary can exploit timing discrepancies and error differences to map internal network topology, probe cloud instance metadata endpoints (e.g., AWS IMDSv1), or reach services otherwise inaccessible from the public internet. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog at time of analysis.
Reflected cross-site scripting in IBM WebSphere Application Server 8.5 and 9.0 allows a remote unauthenticated attacker to inject and execute arbitrary JavaScript in a victim's browser by tricking them into clicking a specially crafted link to the vulnerable server. Successful exploitation can lead to session token theft, credential harvesting, or unauthorized actions performed under the victim's browser context. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available.
An authentication bypass in IBM WebSphere Application Server 9.0 and 8.5 allows an attacker on an adjacent network segment to reach and invoke an administrative console servlet without valid credentials, because the servlet is missing the authorization check that should gate it (CWE-862). Successful exploitation gives low-level confidentiality and integrity exposure plus a high availability impact on the affected server. IBM has released a vendor patch, and there is no CISA KEV listing, no publicly available exploit code, and no EPSS signal in the supplied data, so the practical risk is concentrated in environments where the admin console is reachable from an untrusted adjacent network.
Authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows an unauthenticated attacker positioned on an adjacent network segment to reach request-handling functionality that performs no authorization check (CWE-862) and read sensitive information from the response. IBM has released a vendor patch, and there is no public exploit code or CISA KEV entry associated with this issue at time of analysis, so exploitation is not confirmed actively exploited. CVSS rates it 6.5 with confidentiality-only impact and PR:N/UI:N, but no EPSS score was supplied, leaving real-world exploitation likelihood unquantified.
IBM WebSphere Application Server 9.0 and 8.5 fail to neutralize CRLF and other control characters coming from remote input before writing them into the server's administrative log, letting an unauthenticated network attacker insert forged log entries (CWE-117, improper output neutralization for logs). The CVSS 3.1 score of 5.3 reflects low integrity impact only - confidentiality and availability are unaffected and no code execution is possible - but falsified administrative logs can mask real activity and mislead incident responders. IBM has published a fix (support page node 7286610); there is no CISA KEV listing and no public exploit identified at time of analysis, though CISA's SSVC assessment marks the issue as automatable.
Authorization bypass in IBM WebSphere Application Server 8.5 and 9.0 lets an attacker positioned on an adjacent network segment reach functionality without the required authorization checks, resulting in limited (low) confidentiality exposure with no integrity or availability impact. The published CVSS 3.1 score is only 3.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N), reflecting that exploitation demands network adjacency and a high-complexity precondition rather than an internet-facing attack. There is no CISA KEV listing, no public exploit code identified in the provided sources, and an EPSS score was not supplied; IBM has published a fix. Note the tension between the 'authorization bypass' label and the very low scored impact — the advisory's own severity framing should be verified directly against the IBM support page.
Log injection in IBM WebSphere Application Server 8.5 and 9.0 lets a remote attacker forge entries in the server's administrative log, undermining the integrity of audit records used for monitoring and forensics. The flaw is rated CVSS 4.8 (AV:N/AC:H/PR:N/UI:N) and stems from improper neutralization of log output (CWE-117). IBM has published a vendor fix, and no public exploit code or CISA KEV listing was identified at time of analysis.
An authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows remote attackers to reach protected resources without valid credentials when the XD or Intelligent-Management features are in use. Successful exploitation yields unauthorized access to confidential data (C:H) with no direct integrity or availability impact, consistent with the CWE-650 (trusting HTTP permission methods) classification. IBM has published an advisory and patch (node/7286610); no public exploit code or CISA KEV listing was present in the supplied intelligence, so active exploitation is unconfirmed.
XML external entity (XXE) injection in the PxXMLInput operator of IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker submit crafted XML so that the job's XML parser resolves external entities, exposing host files and internal network resources. The flaw is confidentiality-only (CVSS 7.7, C:H/I:N/A:N) and requires valid credentials plus a job that feeds attacker-influenced XML into the PxXMLInput stage. IBM has published a vendor fix; there is no CISA KEV listing and no public exploit identified at time of analysis.
Authenticated denial of service in IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) lets a remote attacker with a valid database session crash the engine by triggering a null pointer dereference. The impact is availability-only (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so confidentiality and integrity of stored data are not directly at risk, but any application or Db2 Connect client depending on the affected instance loses service. No public exploit code has been identified at time of analysis, the flaw is not in CISA KEV, SSVC rates exploitation and automatable both as none/no, and no EPSS score was supplied in the intelligence feed.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 accept forged requests without adequate validation, letting a remote attacker ride an authenticated administrator's browser session to read and lightly modify data exposed through the Db2 Mirror interface. Exploitation requires the victim to be logged in and to interact with attacker-controlled content (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, base 5.4), so this is a cross-site request forgery rather than a pre-authentication takeover. There is no CISA KEV listing, no public exploit code identified, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no'; IBM has published a fix via its support advisory.
IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) can be driven into a denial-of-service condition by a remote attacker who holds valid database credentials, through uncontrolled consumption of server resources. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so the impact is loss of availability only - no confidentiality or integrity exposure is claimed. Patch exists via IBM support document 7286983; there is no public exploit identified at time of analysis and CISA's SSVC assessment records exploitation as 'none'.
An improper authentication flaw (CWE-287) in IBM Langflow OSS versions 1.0.0 through 1.10.2 lets a remote attacker who already holds a valid low-privileged account change the password of another user's account, resulting in account takeover rather than direct code execution. The CVSS 3.1 score is 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L), reflecting that exploitation requires an authenticated session and primarily damages integrity and availability of the targeted account. No public exploit code has been identified and the issue is not listed in CISA KEV, but SSVC flags partial technical impact and the vendor has published a fix; the exact patched version string is not enumerated in the available data.
IBM i Navigator for i — the browser-based administration console shipped with IBM i 7.3, 7.4, 7.5 and 7.6 — can be made to ignore the binding that ties an administrative session to the client's source IP address, allowing a remote, unauthenticated attacker (CVSS PR:N/UI:N) to reach sensitive information that should have been confined to a legitimate session. IBM scores the exposure 5.3 with confidentiality-only impact (C:L/I:N/A:N), consistent with a targeted information disclosure rather than a full compromise of the host. Vendor fixes are published, and no public exploit code or CISA KEV entry appears in the supplied intelligence, so this is best treated as a patch-on-schedule hardening item rather than an emergency.
Improper validation of the WebSocket origin in IBM i 7.3, 7.4, 7.5, and 7.6 allows a remote attacker to read limited sensitive information by luring a logged-in user into a cross-origin WebSocket connection. The vulnerability requires user interaction (the victim must visit an attacker-controlled page) and yields only low confidentiality impact, giving a CVSS 3.1 base score of 4.3. There is no public exploit identified at time of analysis and CISA SSVC reports no active exploitation, so this is a low-urgency information-disclosure defect rather than an emergency patch item.
A race condition in the IBM i WebSocket handshake process allows a remote authenticated attacker to obtain sensitive information on IBM i 7.6, 7.5, 7.4, and 7.3. The flaw requires valid credentials and a precisely timed concurrent request pattern (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N, base 4.2), so it is a low-severity, non-automatable issue rather than a mass-exploitation candidate. CISA's SSVC assessment rates exploitation as 'none' with no automatable path, and no public exploit code has been identified at time of analysis; IBM has published a vendor patch.
Navigator for i - the web-based administration interface bundled with IBM i 7.3 through 7.6 - permits authenticated remote attackers to upload files to filesystem paths that Navigator's own configuration should prohibit, via a path traversal flaw (CWE-22). The bypass is bounded by the attacker's underlying IBM i profile permissions: Navigator's upload restrictions are circumvented, but the OS-level object authority of the user's profile still constrains what can actually be written. No public exploit exists and SSVC assesses exploitation status as none, placing this squarely in the medium-priority tier.
IBM Common Licensing Agent and ART versions 9.0 through 9.0.0.2 enforce input validation only on the client side, leaving the server-side API unprotected against modified requests. An attacker with local access can intercept or craft requests that bypass client-enforced restrictions, submitting values the application was not designed to accept, leading to unintended behavior - most critically characterized by IBM as high availability impact. No public exploit or active exploitation has been identified; SSVC classifies technical impact as partial with exploitation status as none.
In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- <command>' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu_cf_events at first event initialization. The allocation is dynamic and the first event that has task context creates such a structure for each online CPU. This is not sufficient. CPUs may be offline during event creation and can be set online during the perf run time. For example commands # echo 0 > /sys/devices/system/cpu/cpu1/online # perf stat -e cycles -i -- stress-ng -t10s --matrix X # sleep 1 # echo 1 > /sys/devices/system/cpu/cpu1/online create an event for CPUs 0,2-X. Since the events are created with task-context, the scheduler will eventually schedule the program on CPU1. This CPU has not created and initialized any per CPU event infrastructure as that CPU was not online at the time of the perf invocation. Thus when the scheduler runs stress-ng on CPU1, the function cpumf_pmu_add() refers to a NULL pointer: struct cpu_cf_events *cpuhw = this_cpu_cfhw(); This function call is invoked after the task stress-ng has been made runnable on CPU1. And this_cpu_cfhw() returns NULL. The result is a panic: Unable to handle kernel pointer dereference in virtual kernel address space Failing address: 0000000000000000 TEID: 0000000000000483 .... Krnl PSW : 0404d00180000000 000003ef8291fd0c (cpumf_pmu_add+0x3c/0x80) .... Call Trace: [<000003ef8291fd0c>] cpumf_pmu_add+0x3c/0x80 [<000003ef82bb5e3e>] event_sched_in+0xae/0x190 [<000003ef82bb60d6>] merge_sched_in+0x1b6/0x390 [<000003ef82bb65b8>] visit_groups_merge.constprop.0.isra.0+0x308/0x5b0 [<000003ef82bb689a>] pmu_groups_sched_in+0x3a/0x50 [<000003ef82bb6a30>] ctx_sched_in+0x180/0x260 [<000003ef82bb780c>] perf_event_context_sched_in+0x11c/0x2d0 [<000003ef82bb79ee>] __perf_event_task_sched_in+0x2e/0xc0 [<000003ef82994834>] finish_task_switch.isra.0+0x1a4/0x250 .... Last Breaking-Event-Address: [<000003ef8291f1d8>] this_cpu_cfhw+0x38/0x40 The issue arises only in per-task context when the CPUMF facility is used and the scheduler picks a random CPU for such a process to run on. The scheduler enables the CPUMF infrastructure via PMU callback functions pmu::add() and pmu::del(). Introduce a CPU hotplug prepare/dead callback pair which creates and removes the per CPU counter data while the CPU is offline. Count the users which track every CPU (cpu == -1), that is perf_event_open() events with task context and /dev/hwctr device sessions, in the new counter cpu_cf_root::tskcnt, protected by pmc_reserve_mutex. This ensures the infrastructure is available when new CPU is selected to run the per-task context process. In cpum_cf_free_root() and cpum_cf_free_cpu() ensure the reference pointer to data structures is set to NULL before the data is freed to prevent interrupt handlers to access stale data. [gor@linux.ibm.com: change commit message]
Server-Side Request Forgery (SSRF) in IBM Langflow OSS 1.0.0-1.11.5 allows remote authenticated attackers to make the server issue outbound HTTP requests to attacker-controlled or internal endpoints, leaking sensitive information from otherwise inaccessible systems. The scope-changed CVSS vector (S:C) confirms the vulnerability's reach extends beyond the Langflow application itself to adjacent internal infrastructure. IBM has released a patch and no public exploit code has been identified at time of analysis.
Arbitrary file read in IBM Langflow OSS 1.0.0 through 1.11.5 allows a remote authenticated attacker to access files outside their authorized scope due to improper access control (CWE-284). The CVSS vector confirms PR:L, meaning exploitation requires valid credentials but no elevated privileges, making this a post-authentication authorization flaw rather than an authentication bypass. No public exploit has been identified at time of analysis, and a vendor patch is available at IBM support node 7286657.
Improper authorization in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker with low-privilege credentials to cause a high-impact denial of service, with scope change indicating the disruption extends beyond the DataStage component into the broader Cloud Pak for Data platform. The root cause (CWE-285) indicates the authorization layer fails to enforce adequate access controls on operations that can disrupt service continuity, meaning any authenticated user may invoke privileged destructive actions without detection. IBM has released a patch; no public exploit code has been identified at time of analysis.
IBM DataStage on Cloud Pak for Data 5.4.0.0 exposes an insecure direct object reference (CWE-639) in its runtime cache layer that permits an authenticated remote attacker to reference and manipulate cache objects they do not own, resulting in denial of service against data integration pipelines. The CVSS S:C (scope changed) metric signals that the impact crosses security boundaries beyond DataStage itself, potentially disrupting co-tenanted Cloud Pak for Data services. A vendor-supplied patch is available via IBM support page 7286562; no public exploit code has been identified at time of analysis.
Absolute-path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to read sensitive files outside the intended directory scope, potentially exposing credentials, configuration data, or other platform secrets. The CVSS vector assigns C:H/I:H/A:H, though IBM's own description limits the stated impact to information disclosure - an inconsistency worth verifying with the vendor advisory. No public exploit code or active exploitation has been identified at time of analysis.
Absolute path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker with low-level privileges to traverse the file system beyond intended boundaries and read sensitive information from the underlying host or container. The CVSS vector (AV:N/AC:L/PR:L/UI:N) indicates straightforward network exploitation requiring only a valid low-privilege account with no user interaction. IBM has released a patch via their support portal; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial of service in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to disrupt service availability by exploiting a path traversal weakness (CWE-22). The affected component is the DataStage data-integration service running on IBM's Cloud Pak for Data platform. An authenticated user (PR:L) can supply crafted path input to reach files or resources outside intended directories, degrading or crashing the service; no public exploit has been identified at time of analysis, and the issue is not in CISA KEV.
Authenticated path traversal in IBM Db2 11.5.x and 12.1.x allows a low-privileged database user to write arbitrary files to the underlying host filesystem via a specially crafted network request. The flaw (CWE-22) exploits insufficient pathname restriction in a Db2 request handler, enabling an attacker to place files outside intended directories - potentially overwriting configuration files, scripts, or other OS-level assets writable by the Db2 service account. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7286985.
Server-side request forgery (SSRF) in IBM WebSphere Application Server 8.5 and 9.0 enables unauthenticated remote attackers to induce the server to issue arbitrary outbound HTTP requests, potentially reaching internal network resources not exposed externally. The vulnerability carries a CVSS 5.3 medium score, reflecting the constrained confidentiality impact (C:L) and absence of integrity or availability effects. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though SSRF in enterprise middleware is a well-understood technique for internal network reconnaissance and cloud metadata exposure.
Cross-user file disclosure in IBM Langflow OSS 1.0.0-1.11.5 allows any authenticated low-privileged user to read files uploaded by other users by supplying arbitrary storage path identifiers in flow component inputs. The File/Read File component, when invoked via the /api/v1/run/advanced/{flow_id} endpoint, accepts user or flow storage namespace identifiers without verifying the requester owns the referenced namespace - a classic IDOR (CWE-639). No public exploit code has been identified at time of analysis, and IBM has released a patch.
Remote denial-of-service in IBM WebSphere Application Server 8.5 and 9.0 allows an unauthenticated network attacker to degrade service availability by sending a specially crafted request that triggers uncontrolled resource consumption (CWE-400). The CVSS A:L metric indicates partial rather than complete service disruption, limiting but not eliminating operational impact. IBM has released a patch via advisory 7286610; no public exploit code or active exploitation has been identified at time of analysis.
Log injection in IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 allows unauthenticated remote actors to insert forged or malformed entries into application log files by supplying input containing special characters such as CRLF sequences that are written to logs without sanitization. The integrity impact is limited to log tampering - attackers cannot read data, escalate privileges, or disrupt service through this flaw alone, but forged log records can mislead incident responders and undermine audit-trail integrity. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.2 allows an authenticated low-privileged attacker to read arbitrary files on the underlying server by injecting dot-dot sequences (/../) into crafted URL requests. The CVSS 3.1 score of 6.5 (C:H/I:N/A:N) reflects a read-only disclosure vector with no write or denial-of-service capability, but the confidentiality impact is materially significant given that Langflow deployments commonly store LLM API keys, pipeline configurations, and model secrets on the host filesystem. No public exploit code or CISA KEV listing has been identified; IBM has released a patch via its support portal.
Denial-of-service exposure in IBM App Connect Enterprise and IBM Integration Bus for z/OS Toolkit allows an authenticated, network-connected user to crash or incapacitate the Toolkit by submitting crafted XML containing recursive or deeply nested entity references. The root cause is CWE-776, improper restriction of recursive entity references in DTDs - commonly called an XML Entity Expansion or 'Billion Laughs' attack. Patch is available per IBM advisory 7286372; no public exploit code or active exploitation has been identified at time of analysis.
Out-of-bounds read in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 enables a remote unauthenticated attacker to cause a denial of service by sending a crafted network request to the mirroring service. The flaw (CWE-125) is exploitable with no authentication or user interaction and can disrupt high-availability replication continuity. IBM has released a patch via advisory node/7285904; no public exploit code has been identified at time of analysis.
Credential leakage via improper logging affects IBM App Connect Enterprise 12.x-13.x and IBM Integration Bus for z/OS 10.1.x, allowing a local attacker to recover plaintext credentials from application log files without requiring elevated privileges. The root cause is CWE-532, where sensitive authentication material is written to diagnostic or operational logs during normal product operation. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch via their support advisory.
IBM i versions 7.3 through 7.6 expose encryption key material to high-privileged local users due to hardcoded cryptographic constants used in the key-obfuscation layer. An attacker with elevated local privileges can leverage knowledge of these constants to reverse the obfuscation and recover plaintext encryption keys, gaining access to data that was assumed to be cryptographically protected. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Remote authenticated attackers can bypass security restrictions in IBM i 7.3 through 7.6 by exploiting improper authentication logic during service-name matching (CWE-287). The flaw allows a low-privileged authenticated user to overstep their authorized service boundaries, achieving limited unauthorized reads and writes with no user interaction required. No public exploit code exists and this CVE does not appear in the CISA KEV catalog; IBM has released a patch via the support portal.
Incorrect authorization in IBM i 7.4, 7.5, and 7.6 permits remote authenticated users with low privileges to modify certain system messages beyond their intended permission scope. The flaw is rooted in CWE-863 (Incorrect Authorization), where the platform performs an authorization check but does so inadequately, allowing privilege overstep without authentication bypass. No public exploit or active exploitation has been identified at time of analysis; IBM has released a patch via its support portal.
Stack-based buffer overflow in IBM i 7.3 through 7.6 allows remote authenticated attackers to cause a denial of service by sending specially crafted network input that exceeds a stack-allocated buffer in a network-accessible component. The vulnerability is gated behind low-privilege authentication (PR:L) and carries no confidentiality or integrity impact, as IBM's advisory scores it CVSS 4.3 with A:L. No public exploit code or active exploitation has been identified; a vendor-released patch is available via the IBM support portal.
Stack-based buffer overflow in IBM i 7.3 through 7.6 allows an authenticated local attacker to crash the system, producing a denial of service with no confidentiality or integrity impact. The flaw is classified as CWE-121 and is limited in severity by both the access prerequisites and the bounded availability-only outcome. A vendor patch is available via IBM's support portal, and no public exploit code has been identified at time of analysis.
Denial of service in IBM i 7.3 through 7.6 is achievable by any remote authenticated low-privilege user via a NULL pointer dereference, causing complete availability loss with no data exposure. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms low-complexity network exploitation requiring only a valid user account and no user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis; IBM has released a patch via its support portal.
Security restriction bypass in IBM i versions 7.3, 7.4, 7.5, and 7.6 enables remote authenticated attackers to circumvent platform-level access controls by exploiting predictable server-generated seed values (CWE-330). The vulnerability stems from insufficient entropy in IBM i's seed generation process, allowing an attacker with a valid low-privilege account to predict protected values - such as session tokens, nonces, or challenge-response material - and leverage them to bypass enforced security boundaries. No public exploit code has been identified at time of analysis; a vendor-supplied patch is available through IBM's support portal.
Uncontrolled recursion in IBM App Connect Enterprise (versions 12.x and 13.x) and IBM Integration Bus for z/OS (version 10.1.x) allows a local authenticated attacker to crash the integration runtime via stack exhaustion, resulting in a denial of service. The flaw is classified as CWE-674 and affects a broad version range across both product lines, with a vendor-released patch now available. No public exploit code or active exploitation has been identified at time of analysis.
Cleartext credential exposure in IBM App Connect Enterprise 12.x and 13.x and IBM Integration Bus for z/OS 10.x allows a local attacker to harvest service credentials directly from trace log files. The middleware writes authentication material in unencrypted form during trace operations, violating the principle of minimal data exposure in diagnostic output (CWE-532). No public exploit has been identified and exploitation requires local filesystem access under high-complexity conditions, but successful compromise yields full credential disclosure with a CVSS confidentiality impact of High.
XML external entity injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM Integration Bus for z/OS (10.1.0.0-10.1.0.7) enables a remote authenticated attacker to exfiltrate sensitive information from the server via maliciously crafted XML input. The CWE-611 flaw allows the underlying XML parser to resolve attacker-controlled external entity references, potentially exposing local files, environment data, or internal network resources. No active exploitation has been identified at time of analysis, and IBM has released a patch via advisory 7286372.
XML External Entity (XXE) injection in IBM App Connect Enterprise and IBM Integration Bus for z/OS enables authenticated remote attackers to exfiltrate sensitive server-side information. Affected versions span IBM App Connect Enterprise 12.x through 13.x and IBM Integration Bus for z/OS 10.1.x. The vulnerability arises from insufficient restriction of XML external entity processing within the integration platform, and a vendor patch is available via IBM's support portal. No public exploit code or active exploitation has been identified at time of analysis.
Denial of service on IBM i versions 7.3 through 7.6 is achievable by exploiting an off-by-one write in the LPD (Line Printer Daemon) queue name parser, corrupting adjacent memory and crashing the affected service. The vendor description specifies a local authenticated attacker as the threat actor, yet IBM's own submitted CVSS vector (AV:N/AC:L/PR:N/UI:N) characterizes this as an unauthenticated network-reachable flaw - a direct contradiction that materially affects risk prioritization. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Improper access control in an SQL stored procedure within IBM Db2 Mirror for i 7.4, 7.5, and 7.6 permits an authenticated low-privileged attacker to permanently delete historical flight-recorder archives, destroying diagnostic audit data critical for replication troubleshooting and post-incident review. The root cause is CWE-285 (Improper Authorization) - the procedure executes a destructive operation without verifying that the invoking principal holds the necessary authority. No public exploit has been identified at time of analysis, and IBM has released a patch via support advisory node/7285904.
Path traversal in IBM Langflow OSS 1.0.0-1.10.2 permits authenticated remote attackers to read arbitrary files on the underlying server by embedding dot-dot sequences (/../) in crafted URL requests. The vulnerability (CWE-22) exposes any file readable by the application process, potentially including configuration files, credentials, private keys, and other sensitive data. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch.
Path traversal in IBM Langflow OSS 1.0.0 through 1.10.2 exposes arbitrary server-side files to authenticated remote attackers, yielding high confidentiality impact with no integrity or availability loss. The CWE-22 flaw stems from insufficient restriction of user-supplied pathnames, allowing traversal sequences to escape the intended directory boundary. IBM self-reported and patched this issue; no public exploit or active exploitation has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.10.2 allows remote authenticated attackers to force the application server to make outbound HTTP requests to arbitrary destinations, enabling reconnaissance of internal network resources and metadata services. The S:C (scope change) in the CVSS vector confirms the vulnerability can reach internal systems beyond the Langflow application boundary - a hallmark of high-impact SSRF. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, and IBM has released a patch.
Parameter injection in IBM i 7.3 through 7.6 allows a local authenticated attacker to inject malicious parameters into Control Language (CL) commands by exploiting improper neutralization of special elements (CWE-78). The flaw requires local access with low-level privileges and produces limited confidentiality and integrity impacts without availability consequence, consistent with the CVSS 4.4 Medium rating. IBM has released a patch via their support portal, and no public exploit code or active exploitation has been identified at time of analysis.
Integer overflow in IBM i versions 7.3 through 7.6 allows remote authenticated attackers to cause a denial of service condition. The vulnerability (CWE-190) is network-reachable but requires prior authentication, and its impact is limited to partial availability degradation with no confidentiality or integrity consequences. IBM has released a patch, and no public exploit code or CISA KEV listing has been identified at time of analysis.
IBM i versions 7.3 through 7.6 expose authenticated remote attackers to a denial-of-service condition via a memory leak (CWE-401). An attacker with low-privilege credentials can repeatedly trigger the vulnerable code path over the network, causing progressive memory exhaustion that degrades or halts system services. No active exploitation has been identified, and IBM has released a patch via Security Advisory 7285844.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to leverage the application server as a proxy to reach internal network resources, exposing sensitive information from systems not directly accessible to the attacker. The CVSS S:C scope-change metric signals that the primary risk extends beyond the vulnerable component itself - cloud-hosted instances are particularly exposed to metadata-service credential theft via endpoints like AWS IMDSv1. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Sensitive process information disclosure in IBM i's PASE subsystem allows authenticated network users to access details about processes they lack permission to view. Affected versions span IBM i 7.3 through 7.6, covering a wide range of currently-supported releases. The vulnerability is limited to confidentiality impact; no integrity or availability degradation results. No public exploit code or active exploitation has been identified at time of analysis.
IBM i versions 7.5 and 7.6 expose privileged file contents to locally authenticated users operating over SSH, allowing a low-privilege account to read information that should be restricted by the operating system's privilege model. The vulnerability is rooted in CWE-267 (Privilege Defined With Unsafe Actions), meaning the IBM i SSH subsystem permits file access operations that violate the intended privilege boundary for the relevant file. No public exploit code has been identified and the vendor-assigned CVSS score of 3.3 (Low) reflects the constrained local access requirement and limited confidentiality impact.
Local information disclosure in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 stems from a predictable Unix domain socket path placed in a world-writable directory, enabling a TOCTOU race condition (CWE-367). A local, low-privileged attacker can pre-create or replace the socket at the predictable path before the Db2 Mirror service claims it, intercepting communications that flow through that socket and obtaining sensitive information. No active exploitation has been confirmed, and no public exploit code has been identified at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.11.2 enables authenticated remote attackers to read arbitrary files accessible to the Langflow process, potentially exposing configuration data, credentials, or other sensitive server-side content. The CVSS vector (PR:L) confirms that prior authentication is required, moderating real-world risk relative to unauthenticated flaws. IBM has released a patch, the vulnerability is vendor-reported, and no public exploit or active exploitation has been identified at time of analysis.
Sensitive file disclosure in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to read arbitrary files on the server by exploiting improper validation of symbolic links. The flaw, classified under CWE-22 (Path Traversal), enables an attacker with valid credentials to escape intended directory boundaries by manipulating symlink resolution, potentially exposing configuration files, credentials, or other sensitive server-side content. IBM has released a patch via their support advisory; no public exploit code or active exploitation has been identified at time of analysis.
Resource exhaustion in IBM MQ Agent CD (v1.0.0-v2.0.1) allows any authenticated console user to monopolize the LLM agent worker pool by submitting arbitrarily large or computationally expensive requests. When multiple such requests are issued concurrently, all available agent workers remain occupied for extended periods - from tens of seconds to over ten minutes each - causing complete unavailability of the AI Agent feature for all other IBM MQ Console users. No public exploit code has been identified at time of analysis, and exploitation requires a valid authenticated session.
Credential exposure in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM Integration Bus for z/OS (10.1.0.0-10.1.0.7) enables any local user to recover database credentials from application log files. The root cause is CWE-532: sensitive material - specifically database connection credentials - is written into log output that can be read by unprivileged local accounts. No public exploit is identified at time of analysis, but successful exploitation yields high confidentiality impact, enabling downstream database compromise.
IBM QRadar SIEM 7.5.0 through 7.5.0 UP15 Interim Fix 005 embeds hard-coded credentials - passwords or cryptographic keys - used for internal authentication, outbound component communication, or internal data encryption. A high-privileged local attacker who discovers and extracts these static credentials could leverage them to access protected internal services, decrypt stored security event data, or authenticate to downstream components without per-user authorization. IBM has issued a patch via advisory 7285277; no public exploit code or CISA KEV listing exists at time of analysis.
Information disclosure in IBM UrbanCode Deploy and IBM DevOps Deploy exposes sensitive deployment secrets in plaintext to authenticated users who should only see redacted values. The root cause is a character-parsing failure in the redaction engine: when a secure property value begins with certain non-ASCII characters, the masking logic fails to suppress subsequent ASCII secure values embedded within non-secure properties, rendering them visible through the UI and REST API. No active exploitation or public POC has been identified; the CVSS score of 6.5 reflects high confidentiality impact (C:H) gated behind low-privilege authentication (PR:L).
Sensitive information disclosure in IBM Enterprise Records (a component of IBM Cloud Pak for Business Automation) allows a local attacker to recover protected data due to the use of a broken or risky cryptographic algorithm (CWE-327). Affected versions span CP4BA releases 24.0.0 through 26.0.0 up to specific interim fix levels. No public exploit code has been identified at time of analysis, and IBM has released interim fixes addressing the cryptographic weakness.
Arbitrary file write in IBM Langflow OSS 1.0.0-1.11.2 allows low-privileged authenticated attackers to plant files at any server-writable path via the SaveToFileComponent's unsanitized path handling on the /api/v1/run/{flow_id} endpoint. The root cause is CWE-22 path traversal: user-supplied path values-including absolute paths and traversal sequences such as ../../-are incorporated into local filesystem operations without sufficient sanitization. Successful exploitation enables unauthorized file creation or modification, with potential for further compromise (e.g., overwriting application scripts or configuration) depending on the Langflow process's file-system permissions. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in IBM Langflow OSS 1.0.0-1.11.2 allows an unauthenticated network attacker to inject persistent malicious scripts into the Playground chat interface. When a victim user subsequently loads the chat view, the stored payload executes in their browser under the application's origin, enabling session hijacking, credential theft, or unauthorized UI manipulation. IBM has released a patch per advisory node/7285646; no public exploit code or CISA KEV listing has been identified at time of analysis.
Arbitrary IDE configuration file writes in IBM Langflow OSS 1.0.0 through 1.11.2 are achievable by authenticated remote attackers who spoof the X-Forwarded-For HTTP header to impersonate a localhost connection, bypassing the platform's IP-based restriction on MCP (Model Context Protocol) server configuration installation. The direct impact is unauthorized writes to files such as ~/.cursor/mcp.json, which define MCP server endpoints loaded by AI-integrated IDEs; a malicious entry in these files can redirect the IDE to an attacker-controlled MCP server, enabling downstream code execution within the developer's environment. No public exploit has been identified at time of analysis; a vendor-released patch is available per IBM advisory 7285646.
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 (CWE-297) exposes encrypted database communications to interception via man-in-the-middle attacks. A network-adjacent or on-path attacker who can position themselves between Netezza clients and the server can intercept or manipulate traffic because the software fails to properly validate TLS certificates - likely failing to check hostname binding. No public exploit has been identified at time of analysis, and a vendor patch is available. EPSS data was not provided, but the network-accessible attack surface warrants prompt patching in any environment transmitting sensitive data.
Log injection in IBM Netezza Software 11.3.0.3 through Interim Fix 002 allows unauthenticated remote attackers to insert arbitrary content into log files by supplying input containing special characters - such as CRLF sequences - that is written to logs without proper neutralization. The vulnerability (CWE-117) enables falsification of audit trails, potential SIEM-alert manipulation, and degradation of forensic fidelity. No public exploit code or active exploitation has been identified; a vendor patch is available via IBM Support.
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 leaves encrypted connections susceptible to man-in-the-middle interception, allowing an unauthenticated network adversary to obtain sensitive information in transit. The flaw is classified under CWE-295, meaning the software either skips certificate chain verification, hostname matching, or revocation checks - permitting a fraudulent certificate to be silently accepted. IBM has released a patch via its support portal; no public exploit code has been identified and this CVE does not appear in the CISA KEV catalog.
IBM Netezza Software 11.3.0.3 through Interim Fix 002 omits the AWS S3 `ExpectedBucketOwner` validation parameter on S3 API calls, leaving the application blind to bucket ownership. An unauthenticated remote attacker who registers an S3 bucket with a name matching or colliding with the target environment's configured bucket can intercept outbound data writes or inject crafted data into Netezza's S3-backed workflows. Both confidentiality and integrity are at risk; no patch version has been independently confirmed beyond the vendor advisory, and no public exploit or active exploitation has been observed.
IBM Qiskit SDK versions 2.1.0 through 2.5.1 crash when deserializing a specially crafted QPY (Quantum Python) payload, due to a CWE-502 deserialization flaw that triggers a segmentation fault. Local attackers who can supply malicious QPY data to a deserializing process can cause the application to crash, resulting in denial of service with no confidentiality or integrity impact. No public exploit code or active exploitation has been identified at time of analysis, and IBM has released a patch via its support portal.
Local denial-of-service in IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 allows a local attacker to exhaust system resources and render the platform unavailable, without requiring any credentials. The vulnerability stems from improper resource allocation controls (CWE-770), meaning the system places no effective cap on resource consumption triggered by local access. No public exploit has been identified at time of analysis, and a vendor patch is available via IBM's support portal.
Broken object-level authorization in IBM Langflow OSS 1.0.0 through 1.11.1 allows any authenticated network user to read and execute private flows belonging to other users. The flaw (CWE-639) stems from the application accepting user-controlled flow identifiers in API requests without verifying that the requesting account owns the targeted resource - a classic horizontal privilege escalation path. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but a vendor patch is available via IBM Security Advisory.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated low-privilege attacker to coerce the application server into issuing arbitrary outbound HTTP requests, enabling internal network enumeration and potentially pivoting to other attacks against backend infrastructure. The CVSS vector (PR:L/AV:N/AC:L) confirms this is exploitable over the network by any authenticated user without elevated permissions or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via their support portal.
Improper input validation in the STRPCCMD CL command handling of IBM i Access Client Solutions (IBM i Access Family 1.1.2.0 through 1.1.9.15) lets an authenticated IBM i user inject and execute arbitrary operating-system commands on the machine running the ACS client, using only that user's normal privileges. IBM rated the issue CVSS 6.3 (AV:N/AC:L/PR:L/UI:N, low confidentiality/integrity/availability impact) and classifies it as OS command injection (CWE-78). There is no public exploit identified at time of analysis and no CISA KEV listing, so exploitation is not confirmed as active.
IBM Sterling Secure Proxy versions 6.2.0.0 through 6.2.1.2 enforce authorization for certain administrative user interface components only on the client side, so an attacker who already holds a valid low-privileged account can cause the browser to render admin-only UI elements that should have been hidden. The result is a limited information disclosure (CVSS 4.3, C:L, no integrity or availability impact) rather than full administrative takeover, and no public exploit code or CISA KEV entry was identified in the supplied intelligence. Because the flaw is a missing server-side authorization check (CWE-285), any authenticated user of the affected deployment can probe it trivially with low attack complexity.
Authenticated HTML injection in IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 lets a logged-in user plant unescaped markup in the management interface, so the product renders attacker-controlled content as trusted UI. The result is UI spoofing and phishing: a crafted page can impersonate legitimate Sterling Secure Proxy screens to harvest credentials or trick operators into unsafe actions, with limited confidentiality and integrity impact (CVSS 5.4). No public exploit code has been identified and the flaw is not listed in CISA KEV; the vendor has published a fix, though an exact fixed version is not named in the provided data.
Stored cross-site scripting in IBM Cognos Analytics 12.0.4 through 12.0.4 FP2 and 12.1.0 through 12.1.3 FP1 allows any authenticated non-privileged user to embed JavaScript in their own given name or surname profile fields. The payload is later rendered without encoding in the administrative user-account management panel, so the script executes in an administrator's browser session when that account's permissions are reviewed, potentially exposing the administrator's session cookies. The issue is rated CVSS 5.4 (medium) and a vendor patch is available; no public exploit code or CISA KEV entry was present in the provided intelligence, so active exploitation is not confirmed.
Improper cache key isolation in IBM Langflow OSS versions 1.0.0 through 1.11.5 allows an authenticated attacker to read and potentially manipulate another user's MCP (Model Context Protocol) server context by exploiting shared cache entries that are not scoped to individual user sessions. The MCP Tools component fails to include sufficient user-identity signals in cache keys, permitting cross-user context leakage. A vendor patch is available and no public exploit or KEV listing has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.10.2 enables unauthenticated remote attackers to coerce the application server into issuing arbitrary outbound HTTP requests. Exploiting this flaw, an attacker can probe internal network topology, reach cloud metadata endpoints (e.g., AWS IMDSv1), or use the server as a proxy to bypass network access controls. No public exploit code or CISA KEV listing has been identified at time of analysis, and IBM has released a patch via their support portal.
Server-side request forgery in IBM Langflow OSS versions 1.0.0 through 1.11.2 allows authenticated network attackers to induce the server to issue unauthorized HTTP requests to arbitrary destinations, enabling internal network enumeration or use of the server as a proxy to reach otherwise-isolated services. The vulnerability is classified as CWE-918 and is confirmed by IBM with a patch available at the vendor support page. No public exploit code and no CISA KEV listing have been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.5 permits unauthenticated remote attackers to cause the application server to issue arbitrary outbound HTTP requests. The primary risk is internal network enumeration - mapping services, ports, and hosts reachable from the Langflow deployment that are otherwise inaccessible to the external attacker - and potential use as a pivot to reach internal APIs or cloud metadata endpoints. No public exploit code exists and the CVE is not in the CISA KEV catalog; IBM has issued a patch via its support portal.
Missing origin validation in IBM Verify Identity Access and Security Verify Access (including their container editions) lets an unauthenticated, remote attacker ride an authenticated user's live session and carry out operations as that victim, potentially enabling follow-on attacks against the deployment. Exploitation requires the victim - a logged-in Verify Identity Access / Security Verify Access user - to be lured into visiting attacker-controlled web content while their session is active (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, 5.4), so confidentiality and integrity impact is limited to the victim's own privilege scope with no availability loss. No public exploit code has been identified and the flaw is not confirmed actively exploited (CISA KEV); EPSS is 0.15% (4th percentile), and vendor-released fixes are available per IBM's advisory, making this a moderate-severity, likely low-priority issue in real-world terms.
Cross-site scripting (CWE-79) in IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2 Interim Fix 001, including the corresponding container editions, allows a remote unauthenticated attacker to run script in the browser of a logged-in user who follows a crafted link, potentially hijacking an authenticated session or performing actions as that user. The CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N), which reflects the need for victim interaction and the limited but scope-changing confidentiality and integrity impact typical of reflected XSS. There is no public exploit code identified at time of analysis, no confirmed active exploitation (not in CISA KEV), and the EPSS probability is only 0.20% (10th percentile), so this is a patching-hygiene issue rather than an emergency response item.
An open redirect flaw in IBM Verify Identity Access and Security Verify Access (including their container editions) lets a remote, unauthenticated attacker craft a link pointing at the product's own trusted domain that silently forwards the victim to an attacker-controlled site. Because the URL originates from the legitimate IBM identity provider, the redirect is highly convincing and can be used to harvest credentials or push further phishing stages. IBM has released fixes (Interim Fix 001 for the affected 10.0.0–10.0.9.2 and 11.0.0–11.0.3 streams); there is no public exploit identified at time of analysis, exploitation requires the victim to click a crafted link, and EPSS is very low at 0.19% (9th percentile).
HTTP request smuggling in IBM WebSphere Application Server 8.5 and 9.0 (including the Liberty variant) enables unauthenticated remote attackers to manipulate shared HTTP caches, circumvent web application firewall rules, and inject malicious scripts into responses served to other users. The root cause is improper parsing of the HTTP Transfer-Encoding request header (CWE-444), a class of vulnerability that exploits disagreement between a front-end proxy and the back-end application server over where one HTTP request ends and the next begins. No public exploit code or active exploitation has been identified at time of analysis; a vendor-released patch is available.
Open redirect (CWE-601) in IBM WebSphere Application Server 9.0, 8.5, and Liberty enables remote attackers to conduct phishing campaigns by crafting URLs hosted on the trusted WebSphere origin that silently forward victims to attacker-controlled sites. The vulnerability requires no authentication from the attacker but does depend on social engineering to lure victims into visiting the crafted URL. Successful exploitation allows credential harvesting, further targeted attacks, or brand abuse against organizations relying on WebSphere's trusted domain reputation. No public exploit or CISA KEV listing has been identified at time of analysis.
HTTP request smuggling in IBM WebSphere Application Server 8.5, 9.0, and Liberty allows remote unauthenticated attackers to poison web caches, bypass web application firewall protections, and conduct cross-site scripting attacks by sending specially crafted Transfer-Encoding headers. The root cause is CWE-444, inconsistent interpretation of HTTP request boundaries between WebSphere and a frontend proxy component. No public exploit or confirmed active exploitation has been identified at time of analysis; a vendor patch is available from IBM.
Blind server-side request forgery (SSRF) in IBM WebSphere Application Server 8.5 and 9.0 enables authenticated remote attackers to issue arbitrary internal HTTP requests by embedding malicious URLs within crafted SOAP messages processed by the server. Although the response is not directly returned to the attacker ('blind' SSRF), an adversary can exploit timing discrepancies and error differences to map internal network topology, probe cloud instance metadata endpoints (e.g., AWS IMDSv1), or reach services otherwise inaccessible from the public internet. No public exploit code has been identified and this CVE is not listed in the CISA KEV catalog at time of analysis.
Reflected cross-site scripting in IBM WebSphere Application Server 8.5 and 9.0 allows a remote unauthenticated attacker to inject and execute arbitrary JavaScript in a victim's browser by tricking them into clicking a specially crafted link to the vulnerable server. Successful exploitation can lead to session token theft, credential harvesting, or unauthorized actions performed under the victim's browser context. No public exploit code or active exploitation has been identified at time of analysis, and a vendor patch is available.
An authentication bypass in IBM WebSphere Application Server 9.0 and 8.5 allows an attacker on an adjacent network segment to reach and invoke an administrative console servlet without valid credentials, because the servlet is missing the authorization check that should gate it (CWE-862). Successful exploitation gives low-level confidentiality and integrity exposure plus a high availability impact on the affected server. IBM has released a vendor patch, and there is no CISA KEV listing, no publicly available exploit code, and no EPSS signal in the supplied data, so the practical risk is concentrated in environments where the admin console is reachable from an untrusted adjacent network.
Authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows an unauthenticated attacker positioned on an adjacent network segment to reach request-handling functionality that performs no authorization check (CWE-862) and read sensitive information from the response. IBM has released a vendor patch, and there is no public exploit code or CISA KEV entry associated with this issue at time of analysis, so exploitation is not confirmed actively exploited. CVSS rates it 6.5 with confidentiality-only impact and PR:N/UI:N, but no EPSS score was supplied, leaving real-world exploitation likelihood unquantified.
IBM WebSphere Application Server 9.0 and 8.5 fail to neutralize CRLF and other control characters coming from remote input before writing them into the server's administrative log, letting an unauthenticated network attacker insert forged log entries (CWE-117, improper output neutralization for logs). The CVSS 3.1 score of 5.3 reflects low integrity impact only - confidentiality and availability are unaffected and no code execution is possible - but falsified administrative logs can mask real activity and mislead incident responders. IBM has published a fix (support page node 7286610); there is no CISA KEV listing and no public exploit identified at time of analysis, though CISA's SSVC assessment marks the issue as automatable.
Authorization bypass in IBM WebSphere Application Server 8.5 and 9.0 lets an attacker positioned on an adjacent network segment reach functionality without the required authorization checks, resulting in limited (low) confidentiality exposure with no integrity or availability impact. The published CVSS 3.1 score is only 3.1 (AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N), reflecting that exploitation demands network adjacency and a high-complexity precondition rather than an internet-facing attack. There is no CISA KEV listing, no public exploit code identified in the provided sources, and an EPSS score was not supplied; IBM has published a fix. Note the tension between the 'authorization bypass' label and the very low scored impact — the advisory's own severity framing should be verified directly against the IBM support page.
Log injection in IBM WebSphere Application Server 8.5 and 9.0 lets a remote attacker forge entries in the server's administrative log, undermining the integrity of audit records used for monitoring and forensics. The flaw is rated CVSS 4.8 (AV:N/AC:H/PR:N/UI:N) and stems from improper neutralization of log output (CWE-117). IBM has published a vendor fix, and no public exploit code or CISA KEV listing was identified at time of analysis.
An authentication bypass in IBM WebSphere Application Server 8.5 and 9.0 allows remote attackers to reach protected resources without valid credentials when the XD or Intelligent-Management features are in use. Successful exploitation yields unauthorized access to confidential data (C:H) with no direct integrity or availability impact, consistent with the CWE-650 (trusting HTTP permission methods) classification. IBM has published an advisory and patch (node/7286610); no public exploit code or CISA KEV listing was present in the supplied intelligence, so active exploitation is unconfirmed.
XML external entity (XXE) injection in the PxXMLInput operator of IBM DataStage on Cloud Pak for Data 5.4.0.0 lets an authenticated remote attacker submit crafted XML so that the job's XML parser resolves external entities, exposing host files and internal network resources. The flaw is confidentiality-only (CVSS 7.7, C:H/I:N/A:N) and requires valid credentials plus a job that feeds attacker-influenced XML into the PxXMLInput stage. IBM has published a vendor fix; there is no CISA KEV listing and no public exploit identified at time of analysis.
Authenticated denial of service in IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) lets a remote attacker with a valid database session crash the engine by triggering a null pointer dereference. The impact is availability-only (CVSS 6.5, AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so confidentiality and integrity of stored data are not directly at risk, but any application or Db2 Connect client depending on the affected instance loses service. No public exploit code has been identified at time of analysis, the flaw is not in CISA KEV, SSVC rates exploitation and automatable both as none/no, and no EPSS score was supplied in the intelligence feed.
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 accept forged requests without adequate validation, letting a remote attacker ride an authenticated administrator's browser session to read and lightly modify data exposed through the Db2 Mirror interface. Exploitation requires the victim to be logged in and to interact with attacker-controlled content (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, base 5.4), so this is a cross-site request forgery rather than a pre-authentication takeover. There is no CISA KEV listing, no public exploit code identified, and CISA's SSVC assessment rates exploitation as 'none' and automatable as 'no'; IBM has published a fix via its support advisory.
IBM Db2 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 on Linux, UNIX and Windows (including Db2 Connect Server) can be driven into a denial-of-service condition by a remote attacker who holds valid database credentials, through uncontrolled consumption of server resources. The flaw is rated CVSS 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), so the impact is loss of availability only - no confidentiality or integrity exposure is claimed. Patch exists via IBM support document 7286983; there is no public exploit identified at time of analysis and CISA's SSVC assessment records exploitation as 'none'.
An improper authentication flaw (CWE-287) in IBM Langflow OSS versions 1.0.0 through 1.10.2 lets a remote attacker who already holds a valid low-privileged account change the password of another user's account, resulting in account takeover rather than direct code execution. The CVSS 3.1 score is 5.4 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L), reflecting that exploitation requires an authenticated session and primarily damages integrity and availability of the targeted account. No public exploit code has been identified and the issue is not listed in CISA KEV, but SSVC flags partial technical impact and the vendor has published a fix; the exact patched version string is not enumerated in the available data.
IBM i Navigator for i — the browser-based administration console shipped with IBM i 7.3, 7.4, 7.5 and 7.6 — can be made to ignore the binding that ties an administrative session to the client's source IP address, allowing a remote, unauthenticated attacker (CVSS PR:N/UI:N) to reach sensitive information that should have been confined to a legitimate session. IBM scores the exposure 5.3 with confidentiality-only impact (C:L/I:N/A:N), consistent with a targeted information disclosure rather than a full compromise of the host. Vendor fixes are published, and no public exploit code or CISA KEV entry appears in the supplied intelligence, so this is best treated as a patch-on-schedule hardening item rather than an emergency.
Improper validation of the WebSocket origin in IBM i 7.3, 7.4, 7.5, and 7.6 allows a remote attacker to read limited sensitive information by luring a logged-in user into a cross-origin WebSocket connection. The vulnerability requires user interaction (the victim must visit an attacker-controlled page) and yields only low confidentiality impact, giving a CVSS 3.1 base score of 4.3. There is no public exploit identified at time of analysis and CISA SSVC reports no active exploitation, so this is a low-urgency information-disclosure defect rather than an emergency patch item.
A race condition in the IBM i WebSocket handshake process allows a remote authenticated attacker to obtain sensitive information on IBM i 7.6, 7.5, 7.4, and 7.3. The flaw requires valid credentials and a precisely timed concurrent request pattern (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N, base 4.2), so it is a low-severity, non-automatable issue rather than a mass-exploitation candidate. CISA's SSVC assessment rates exploitation as 'none' with no automatable path, and no public exploit code has been identified at time of analysis; IBM has published a vendor patch.
Navigator for i - the web-based administration interface bundled with IBM i 7.3 through 7.6 - permits authenticated remote attackers to upload files to filesystem paths that Navigator's own configuration should prohibit, via a path traversal flaw (CWE-22). The bypass is bounded by the attacker's underlying IBM i profile permissions: Navigator's upload restrictions are circumvented, but the OS-level object authority of the user's profile still constrains what can actually be written. No public exploit exists and SSVC assesses exploitation status as none, placing this squarely in the medium-priority tier.
IBM Common Licensing Agent and ART versions 9.0 through 9.0.0.2 enforce input validation only on the client side, leaving the server-side API unprotected against modified requests. An attacker with local access can intercept or craft requests that bypass client-enforced restrictions, submitting values the application was not designed to accept, leading to unintended behavior - most critically characterized by IBM as high availability impact. No public exploit or active exploitation has been identified; SSVC classifies technical impact as partial with exploitation status as none.
In the Linux kernel, the following vulnerability has been resolved: s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- <command>' crashes the kernel when CPUs are hotplug added during that run. Root cause is the allocation of struct cpu_cf_events at first event initialization. The allocation is dynamic and the first event that has task context creates such a structure for each online CPU. This is not sufficient. CPUs may be offline during event creation and can be set online during the perf run time. For example commands # echo 0 > /sys/devices/system/cpu/cpu1/online # perf stat -e cycles -i -- stress-ng -t10s --matrix X # sleep 1 # echo 1 > /sys/devices/system/cpu/cpu1/online create an event for CPUs 0,2-X. Since the events are created with task-context, the scheduler will eventually schedule the program on CPU1. This CPU has not created and initialized any per CPU event infrastructure as that CPU was not online at the time of the perf invocation. Thus when the scheduler runs stress-ng on CPU1, the function cpumf_pmu_add() refers to a NULL pointer: struct cpu_cf_events *cpuhw = this_cpu_cfhw(); This function call is invoked after the task stress-ng has been made runnable on CPU1. And this_cpu_cfhw() returns NULL. The result is a panic: Unable to handle kernel pointer dereference in virtual kernel address space Failing address: 0000000000000000 TEID: 0000000000000483 .... Krnl PSW : 0404d00180000000 000003ef8291fd0c (cpumf_pmu_add+0x3c/0x80) .... Call Trace: [<000003ef8291fd0c>] cpumf_pmu_add+0x3c/0x80 [<000003ef82bb5e3e>] event_sched_in+0xae/0x190 [<000003ef82bb60d6>] merge_sched_in+0x1b6/0x390 [<000003ef82bb65b8>] visit_groups_merge.constprop.0.isra.0+0x308/0x5b0 [<000003ef82bb689a>] pmu_groups_sched_in+0x3a/0x50 [<000003ef82bb6a30>] ctx_sched_in+0x180/0x260 [<000003ef82bb780c>] perf_event_context_sched_in+0x11c/0x2d0 [<000003ef82bb79ee>] __perf_event_task_sched_in+0x2e/0xc0 [<000003ef82994834>] finish_task_switch.isra.0+0x1a4/0x250 .... Last Breaking-Event-Address: [<000003ef8291f1d8>] this_cpu_cfhw+0x38/0x40 The issue arises only in per-task context when the CPUMF facility is used and the scheduler picks a random CPU for such a process to run on. The scheduler enables the CPUMF infrastructure via PMU callback functions pmu::add() and pmu::del(). Introduce a CPU hotplug prepare/dead callback pair which creates and removes the per CPU counter data while the CPU is offline. Count the users which track every CPU (cpu == -1), that is perf_event_open() events with task context and /dev/hwctr device sessions, in the new counter cpu_cf_root::tskcnt, protected by pmc_reserve_mutex. This ensures the infrastructure is available when new CPU is selected to run the per-task context process. In cpum_cf_free_root() and cpum_cf_free_cpu() ensure the reference pointer to data structures is set to NULL before the data is freed to prevent interrupt handlers to access stale data. [gor@linux.ibm.com: change commit message]
Server-Side Request Forgery (SSRF) in IBM Langflow OSS 1.0.0-1.11.5 allows remote authenticated attackers to make the server issue outbound HTTP requests to attacker-controlled or internal endpoints, leaking sensitive information from otherwise inaccessible systems. The scope-changed CVSS vector (S:C) confirms the vulnerability's reach extends beyond the Langflow application itself to adjacent internal infrastructure. IBM has released a patch and no public exploit code has been identified at time of analysis.
Arbitrary file read in IBM Langflow OSS 1.0.0 through 1.11.5 allows a remote authenticated attacker to access files outside their authorized scope due to improper access control (CWE-284). The CVSS vector confirms PR:L, meaning exploitation requires valid credentials but no elevated privileges, making this a post-authentication authorization flaw rather than an authentication bypass. No public exploit has been identified at time of analysis, and a vendor patch is available at IBM support node 7286657.
Improper authorization in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker with low-privilege credentials to cause a high-impact denial of service, with scope change indicating the disruption extends beyond the DataStage component into the broader Cloud Pak for Data platform. The root cause (CWE-285) indicates the authorization layer fails to enforce adequate access controls on operations that can disrupt service continuity, meaning any authenticated user may invoke privileged destructive actions without detection. IBM has released a patch; no public exploit code has been identified at time of analysis.
IBM DataStage on Cloud Pak for Data 5.4.0.0 exposes an insecure direct object reference (CWE-639) in its runtime cache layer that permits an authenticated remote attacker to reference and manipulate cache objects they do not own, resulting in denial of service against data integration pipelines. The CVSS S:C (scope changed) metric signals that the impact crosses security boundaries beyond DataStage itself, potentially disrupting co-tenanted Cloud Pak for Data services. A vendor-supplied patch is available via IBM support page 7286562; no public exploit code has been identified at time of analysis.
Absolute-path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to read sensitive files outside the intended directory scope, potentially exposing credentials, configuration data, or other platform secrets. The CVSS vector assigns C:H/I:H/A:H, though IBM's own description limits the stated impact to information disclosure - an inconsistency worth verifying with the vendor advisory. No public exploit code or active exploitation has been identified at time of analysis.
Absolute path traversal in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker with low-level privileges to traverse the file system beyond intended boundaries and read sensitive information from the underlying host or container. The CVSS vector (AV:N/AC:L/PR:L/UI:N) indicates straightforward network exploitation requiring only a valid low-privilege account with no user interaction. IBM has released a patch via their support portal; no public exploit code or CISA KEV listing has been identified at time of analysis.
Denial of service in IBM DataStage on Cloud Pak for Data 5.4.0.0 allows a remote authenticated attacker to disrupt service availability by exploiting a path traversal weakness (CWE-22). The affected component is the DataStage data-integration service running on IBM's Cloud Pak for Data platform. An authenticated user (PR:L) can supply crafted path input to reach files or resources outside intended directories, degrading or crashing the service; no public exploit has been identified at time of analysis, and the issue is not in CISA KEV.
Authenticated path traversal in IBM Db2 11.5.x and 12.1.x allows a low-privileged database user to write arbitrary files to the underlying host filesystem via a specially crafted network request. The flaw (CWE-22) exploits insufficient pathname restriction in a Db2 request handler, enabling an attacker to place files outside intended directories - potentially overwriting configuration files, scripts, or other OS-level assets writable by the Db2 service account. No public exploit code has been identified at time of analysis, and IBM has released a patch via advisory 7286985.
Server-side request forgery (SSRF) in IBM WebSphere Application Server 8.5 and 9.0 enables unauthenticated remote attackers to induce the server to issue arbitrary outbound HTTP requests, potentially reaching internal network resources not exposed externally. The vulnerability carries a CVSS 5.3 medium score, reflecting the constrained confidentiality impact (C:L) and absence of integrity or availability effects. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, though SSRF in enterprise middleware is a well-understood technique for internal network reconnaissance and cloud metadata exposure.
Cross-user file disclosure in IBM Langflow OSS 1.0.0-1.11.5 allows any authenticated low-privileged user to read files uploaded by other users by supplying arbitrary storage path identifiers in flow component inputs. The File/Read File component, when invoked via the /api/v1/run/advanced/{flow_id} endpoint, accepts user or flow storage namespace identifiers without verifying the requester owns the referenced namespace - a classic IDOR (CWE-639). No public exploit code has been identified at time of analysis, and IBM has released a patch.
Remote denial-of-service in IBM WebSphere Application Server 8.5 and 9.0 allows an unauthenticated network attacker to degrade service availability by sending a specially crafted request that triggers uncontrolled resource consumption (CWE-400). The CVSS A:L metric indicates partial rather than complete service disruption, limiting but not eliminating operational impact. IBM has released a patch via advisory 7286610; no public exploit code or active exploitation has been identified at time of analysis.
Log injection in IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 allows unauthenticated remote actors to insert forged or malformed entries into application log files by supplying input containing special characters such as CRLF sequences that are written to logs without sanitization. The integrity impact is limited to log tampering - attackers cannot read data, escalate privileges, or disrupt service through this flaw alone, but forged log records can mislead incident responders and undermine audit-trail integrity. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.10.2 allows an authenticated low-privileged attacker to read arbitrary files on the underlying server by injecting dot-dot sequences (/../) into crafted URL requests. The CVSS 3.1 score of 6.5 (C:H/I:N/A:N) reflects a read-only disclosure vector with no write or denial-of-service capability, but the confidentiality impact is materially significant given that Langflow deployments commonly store LLM API keys, pipeline configurations, and model secrets on the host filesystem. No public exploit code or CISA KEV listing has been identified; IBM has released a patch via its support portal.
Denial-of-service exposure in IBM App Connect Enterprise and IBM Integration Bus for z/OS Toolkit allows an authenticated, network-connected user to crash or incapacitate the Toolkit by submitting crafted XML containing recursive or deeply nested entity references. The root cause is CWE-776, improper restriction of recursive entity references in DTDs - commonly called an XML Entity Expansion or 'Billion Laughs' attack. Patch is available per IBM advisory 7286372; no public exploit code or active exploitation has been identified at time of analysis.
Out-of-bounds read in IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 enables a remote unauthenticated attacker to cause a denial of service by sending a crafted network request to the mirroring service. The flaw (CWE-125) is exploitable with no authentication or user interaction and can disrupt high-availability replication continuity. IBM has released a patch via advisory node/7285904; no public exploit code has been identified at time of analysis.
Credential leakage via improper logging affects IBM App Connect Enterprise 12.x-13.x and IBM Integration Bus for z/OS 10.1.x, allowing a local attacker to recover plaintext credentials from application log files without requiring elevated privileges. The root cause is CWE-532, where sensitive authentication material is written to diagnostic or operational logs during normal product operation. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch via their support advisory.
IBM i versions 7.3 through 7.6 expose encryption key material to high-privileged local users due to hardcoded cryptographic constants used in the key-obfuscation layer. An attacker with elevated local privileges can leverage knowledge of these constants to reverse the obfuscation and recover plaintext encryption keys, gaining access to data that was assumed to be cryptographically protected. No public exploit has been identified at time of analysis, and IBM has released a patch via its support portal.
Remote authenticated attackers can bypass security restrictions in IBM i 7.3 through 7.6 by exploiting improper authentication logic during service-name matching (CWE-287). The flaw allows a low-privileged authenticated user to overstep their authorized service boundaries, achieving limited unauthorized reads and writes with no user interaction required. No public exploit code exists and this CVE does not appear in the CISA KEV catalog; IBM has released a patch via the support portal.
Incorrect authorization in IBM i 7.4, 7.5, and 7.6 permits remote authenticated users with low privileges to modify certain system messages beyond their intended permission scope. The flaw is rooted in CWE-863 (Incorrect Authorization), where the platform performs an authorization check but does so inadequately, allowing privilege overstep without authentication bypass. No public exploit or active exploitation has been identified at time of analysis; IBM has released a patch via its support portal.
Stack-based buffer overflow in IBM i 7.3 through 7.6 allows remote authenticated attackers to cause a denial of service by sending specially crafted network input that exceeds a stack-allocated buffer in a network-accessible component. The vulnerability is gated behind low-privilege authentication (PR:L) and carries no confidentiality or integrity impact, as IBM's advisory scores it CVSS 4.3 with A:L. No public exploit code or active exploitation has been identified; a vendor-released patch is available via the IBM support portal.
Stack-based buffer overflow in IBM i 7.3 through 7.6 allows an authenticated local attacker to crash the system, producing a denial of service with no confidentiality or integrity impact. The flaw is classified as CWE-121 and is limited in severity by both the access prerequisites and the bounded availability-only outcome. A vendor patch is available via IBM's support portal, and no public exploit code has been identified at time of analysis.
Denial of service in IBM i 7.3 through 7.6 is achievable by any remote authenticated low-privilege user via a NULL pointer dereference, causing complete availability loss with no data exposure. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) confirms low-complexity network exploitation requiring only a valid user account and no user interaction. No public exploit code and no CISA KEV listing have been identified at time of analysis; IBM has released a patch via its support portal.
Security restriction bypass in IBM i versions 7.3, 7.4, 7.5, and 7.6 enables remote authenticated attackers to circumvent platform-level access controls by exploiting predictable server-generated seed values (CWE-330). The vulnerability stems from insufficient entropy in IBM i's seed generation process, allowing an attacker with a valid low-privilege account to predict protected values - such as session tokens, nonces, or challenge-response material - and leverage them to bypass enforced security boundaries. No public exploit code has been identified at time of analysis; a vendor-supplied patch is available through IBM's support portal.
Uncontrolled recursion in IBM App Connect Enterprise (versions 12.x and 13.x) and IBM Integration Bus for z/OS (version 10.1.x) allows a local authenticated attacker to crash the integration runtime via stack exhaustion, resulting in a denial of service. The flaw is classified as CWE-674 and affects a broad version range across both product lines, with a vendor-released patch now available. No public exploit code or active exploitation has been identified at time of analysis.
Cleartext credential exposure in IBM App Connect Enterprise 12.x and 13.x and IBM Integration Bus for z/OS 10.x allows a local attacker to harvest service credentials directly from trace log files. The middleware writes authentication material in unencrypted form during trace operations, violating the principle of minimal data exposure in diagnostic output (CWE-532). No public exploit has been identified and exploitation requires local filesystem access under high-complexity conditions, but successful compromise yields full credential disclosure with a CVSS confidentiality impact of High.
XML external entity injection in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM Integration Bus for z/OS (10.1.0.0-10.1.0.7) enables a remote authenticated attacker to exfiltrate sensitive information from the server via maliciously crafted XML input. The CWE-611 flaw allows the underlying XML parser to resolve attacker-controlled external entity references, potentially exposing local files, environment data, or internal network resources. No active exploitation has been identified at time of analysis, and IBM has released a patch via advisory 7286372.
XML External Entity (XXE) injection in IBM App Connect Enterprise and IBM Integration Bus for z/OS enables authenticated remote attackers to exfiltrate sensitive server-side information. Affected versions span IBM App Connect Enterprise 12.x through 13.x and IBM Integration Bus for z/OS 10.1.x. The vulnerability arises from insufficient restriction of XML external entity processing within the integration platform, and a vendor patch is available via IBM's support portal. No public exploit code or active exploitation has been identified at time of analysis.
Denial of service on IBM i versions 7.3 through 7.6 is achievable by exploiting an off-by-one write in the LPD (Line Printer Daemon) queue name parser, corrupting adjacent memory and crashing the affected service. The vendor description specifies a local authenticated attacker as the threat actor, yet IBM's own submitted CVSS vector (AV:N/AC:L/PR:N/UI:N) characterizes this as an unauthenticated network-reachable flaw - a direct contradiction that materially affects risk prioritization. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Improper access control in an SQL stored procedure within IBM Db2 Mirror for i 7.4, 7.5, and 7.6 permits an authenticated low-privileged attacker to permanently delete historical flight-recorder archives, destroying diagnostic audit data critical for replication troubleshooting and post-incident review. The root cause is CWE-285 (Improper Authorization) - the procedure executes a destructive operation without verifying that the invoking principal holds the necessary authority. No public exploit has been identified at time of analysis, and IBM has released a patch via support advisory node/7285904.
Path traversal in IBM Langflow OSS 1.0.0-1.10.2 permits authenticated remote attackers to read arbitrary files on the underlying server by embedding dot-dot sequences (/../) in crafted URL requests. The vulnerability (CWE-22) exposes any file readable by the application process, potentially including configuration files, credentials, private keys, and other sensitive data. No public exploit code or active exploitation has been identified at time of analysis; IBM has released a patch.
Path traversal in IBM Langflow OSS 1.0.0 through 1.10.2 exposes arbitrary server-side files to authenticated remote attackers, yielding high confidentiality impact with no integrity or availability loss. The CWE-22 flaw stems from insufficient restriction of user-supplied pathnames, allowing traversal sequences to escape the intended directory boundary. IBM self-reported and patched this issue; no public exploit or active exploitation has been identified at time of analysis.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.10.2 allows remote authenticated attackers to force the application server to make outbound HTTP requests to arbitrary destinations, enabling reconnaissance of internal network resources and metadata services. The S:C (scope change) in the CVSS vector confirms the vulnerability can reach internal systems beyond the Langflow application boundary - a hallmark of high-impact SSRF. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, and IBM has released a patch.
Parameter injection in IBM i 7.3 through 7.6 allows a local authenticated attacker to inject malicious parameters into Control Language (CL) commands by exploiting improper neutralization of special elements (CWE-78). The flaw requires local access with low-level privileges and produces limited confidentiality and integrity impacts without availability consequence, consistent with the CVSS 4.4 Medium rating. IBM has released a patch via their support portal, and no public exploit code or active exploitation has been identified at time of analysis.
Integer overflow in IBM i versions 7.3 through 7.6 allows remote authenticated attackers to cause a denial of service condition. The vulnerability (CWE-190) is network-reachable but requires prior authentication, and its impact is limited to partial availability degradation with no confidentiality or integrity consequences. IBM has released a patch, and no public exploit code or CISA KEV listing has been identified at time of analysis.
IBM i versions 7.3 through 7.6 expose authenticated remote attackers to a denial-of-service condition via a memory leak (CWE-401). An attacker with low-privilege credentials can repeatedly trigger the vulnerable code path over the network, causing progressive memory exhaustion that degrades or halts system services. No active exploitation has been identified, and IBM has released a patch via Security Advisory 7285844.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to leverage the application server as a proxy to reach internal network resources, exposing sensitive information from systems not directly accessible to the attacker. The CVSS S:C scope-change metric signals that the primary risk extends beyond the vulnerable component itself - cloud-hosted instances are particularly exposed to metadata-service credential theft via endpoints like AWS IMDSv1. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis.
Sensitive process information disclosure in IBM i's PASE subsystem allows authenticated network users to access details about processes they lack permission to view. Affected versions span IBM i 7.3 through 7.6, covering a wide range of currently-supported releases. The vulnerability is limited to confidentiality impact; no integrity or availability degradation results. No public exploit code or active exploitation has been identified at time of analysis.
IBM i versions 7.5 and 7.6 expose privileged file contents to locally authenticated users operating over SSH, allowing a low-privilege account to read information that should be restricted by the operating system's privilege model. The vulnerability is rooted in CWE-267 (Privilege Defined With Unsafe Actions), meaning the IBM i SSH subsystem permits file access operations that violate the intended privilege boundary for the relevant file. No public exploit code has been identified and the vendor-assigned CVSS score of 3.3 (Low) reflects the constrained local access requirement and limited confidentiality impact.
Local information disclosure in IBM Db2 Mirror for i 7.4, 7.5, and 7.6 stems from a predictable Unix domain socket path placed in a world-writable directory, enabling a TOCTOU race condition (CWE-367). A local, low-privileged attacker can pre-create or replace the socket at the predictable path before the Db2 Mirror service claims it, intercepting communications that flow through that socket and obtaining sensitive information. No active exploitation has been confirmed, and no public exploit code has been identified at time of analysis.
Path traversal in IBM Langflow OSS versions 1.0.0 through 1.11.2 enables authenticated remote attackers to read arbitrary files accessible to the Langflow process, potentially exposing configuration data, credentials, or other sensitive server-side content. The CVSS vector (PR:L) confirms that prior authentication is required, moderating real-world risk relative to unauthenticated flaws. IBM has released a patch, the vulnerability is vendor-reported, and no public exploit or active exploitation has been identified at time of analysis.
Sensitive file disclosure in IBM Langflow OSS 1.0.0 through 1.11.2 allows authenticated remote attackers to read arbitrary files on the server by exploiting improper validation of symbolic links. The flaw, classified under CWE-22 (Path Traversal), enables an attacker with valid credentials to escape intended directory boundaries by manipulating symlink resolution, potentially exposing configuration files, credentials, or other sensitive server-side content. IBM has released a patch via their support advisory; no public exploit code or active exploitation has been identified at time of analysis.
Resource exhaustion in IBM MQ Agent CD (v1.0.0-v2.0.1) allows any authenticated console user to monopolize the LLM agent worker pool by submitting arbitrarily large or computationally expensive requests. When multiple such requests are issued concurrently, all available agent workers remain occupied for extended periods - from tens of seconds to over ten minutes each - causing complete unavailability of the AI Agent feature for all other IBM MQ Console users. No public exploit code has been identified at time of analysis, and exploitation requires a valid authenticated session.
Credential exposure in IBM App Connect Enterprise (versions 12.0.1.0-12.0.12.28 and 13.0.1.0-13.0.8.1) and IBM Integration Bus for z/OS (10.1.0.0-10.1.0.7) enables any local user to recover database credentials from application log files. The root cause is CWE-532: sensitive material - specifically database connection credentials - is written into log output that can be read by unprivileged local accounts. No public exploit is identified at time of analysis, but successful exploitation yields high confidentiality impact, enabling downstream database compromise.
IBM QRadar SIEM 7.5.0 through 7.5.0 UP15 Interim Fix 005 embeds hard-coded credentials - passwords or cryptographic keys - used for internal authentication, outbound component communication, or internal data encryption. A high-privileged local attacker who discovers and extracts these static credentials could leverage them to access protected internal services, decrypt stored security event data, or authenticate to downstream components without per-user authorization. IBM has issued a patch via advisory 7285277; no public exploit code or CISA KEV listing exists at time of analysis.
Information disclosure in IBM UrbanCode Deploy and IBM DevOps Deploy exposes sensitive deployment secrets in plaintext to authenticated users who should only see redacted values. The root cause is a character-parsing failure in the redaction engine: when a secure property value begins with certain non-ASCII characters, the masking logic fails to suppress subsequent ASCII secure values embedded within non-secure properties, rendering them visible through the UI and REST API. No active exploitation or public POC has been identified; the CVSS score of 6.5 reflects high confidentiality impact (C:H) gated behind low-privilege authentication (PR:L).
Sensitive information disclosure in IBM Enterprise Records (a component of IBM Cloud Pak for Business Automation) allows a local attacker to recover protected data due to the use of a broken or risky cryptographic algorithm (CWE-327). Affected versions span CP4BA releases 24.0.0 through 26.0.0 up to specific interim fix levels. No public exploit code has been identified at time of analysis, and IBM has released interim fixes addressing the cryptographic weakness.
Arbitrary file write in IBM Langflow OSS 1.0.0-1.11.2 allows low-privileged authenticated attackers to plant files at any server-writable path via the SaveToFileComponent's unsanitized path handling on the /api/v1/run/{flow_id} endpoint. The root cause is CWE-22 path traversal: user-supplied path values-including absolute paths and traversal sequences such as ../../-are incorporated into local filesystem operations without sufficient sanitization. Successful exploitation enables unauthorized file creation or modification, with potential for further compromise (e.g., overwriting application scripts or configuration) depending on the Langflow process's file-system permissions. No public exploit code or CISA KEV listing has been identified at time of analysis.
Stored cross-site scripting in IBM Langflow OSS 1.0.0-1.11.2 allows an unauthenticated network attacker to inject persistent malicious scripts into the Playground chat interface. When a victim user subsequently loads the chat view, the stored payload executes in their browser under the application's origin, enabling session hijacking, credential theft, or unauthorized UI manipulation. IBM has released a patch per advisory node/7285646; no public exploit code or CISA KEV listing has been identified at time of analysis.
Arbitrary IDE configuration file writes in IBM Langflow OSS 1.0.0 through 1.11.2 are achievable by authenticated remote attackers who spoof the X-Forwarded-For HTTP header to impersonate a localhost connection, bypassing the platform's IP-based restriction on MCP (Model Context Protocol) server configuration installation. The direct impact is unauthorized writes to files such as ~/.cursor/mcp.json, which define MCP server endpoints loaded by AI-integrated IDEs; a malicious entry in these files can redirect the IDE to an attacker-controlled MCP server, enabling downstream code execution within the developer's environment. No public exploit has been identified at time of analysis; a vendor-released patch is available per IBM advisory 7285646.
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 (CWE-297) exposes encrypted database communications to interception via man-in-the-middle attacks. A network-adjacent or on-path attacker who can position themselves between Netezza clients and the server can intercept or manipulate traffic because the software fails to properly validate TLS certificates - likely failing to check hostname binding. No public exploit has been identified at time of analysis, and a vendor patch is available. EPSS data was not provided, but the network-accessible attack surface warrants prompt patching in any environment transmitting sensitive data.
Log injection in IBM Netezza Software 11.3.0.3 through Interim Fix 002 allows unauthenticated remote attackers to insert arbitrary content into log files by supplying input containing special characters - such as CRLF sequences - that is written to logs without proper neutralization. The vulnerability (CWE-117) enables falsification of audit trails, potential SIEM-alert manipulation, and degradation of forensic fidelity. No public exploit code or active exploitation has been identified; a vendor patch is available via IBM Support.
Improper TLS certificate validation in IBM Netezza Software 11.3.0.3 through Interim Fix 002 leaves encrypted connections susceptible to man-in-the-middle interception, allowing an unauthenticated network adversary to obtain sensitive information in transit. The flaw is classified under CWE-295, meaning the software either skips certificate chain verification, hostname matching, or revocation checks - permitting a fraudulent certificate to be silently accepted. IBM has released a patch via its support portal; no public exploit code has been identified and this CVE does not appear in the CISA KEV catalog.
IBM Netezza Software 11.3.0.3 through Interim Fix 002 omits the AWS S3 `ExpectedBucketOwner` validation parameter on S3 API calls, leaving the application blind to bucket ownership. An unauthenticated remote attacker who registers an S3 bucket with a name matching or colliding with the target environment's configured bucket can intercept outbound data writes or inject crafted data into Netezza's S3-backed workflows. Both confidentiality and integrity are at risk; no patch version has been independently confirmed beyond the vendor advisory, and no public exploit or active exploitation has been observed.
IBM Qiskit SDK versions 2.1.0 through 2.5.1 crash when deserializing a specially crafted QPY (Quantum Python) payload, due to a CWE-502 deserialization flaw that triggers a segmentation fault. Local attackers who can supply malicious QPY data to a deserializing process can cause the application to crash, resulting in denial of service with no confidentiality or integrity impact. No public exploit code or active exploitation has been identified at time of analysis, and IBM has released a patch via its support portal.
Local denial-of-service in IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 allows a local attacker to exhaust system resources and render the platform unavailable, without requiring any credentials. The vulnerability stems from improper resource allocation controls (CWE-770), meaning the system places no effective cap on resource consumption triggered by local access. No public exploit has been identified at time of analysis, and a vendor patch is available via IBM's support portal.
Broken object-level authorization in IBM Langflow OSS 1.0.0 through 1.11.1 allows any authenticated network user to read and execute private flows belonging to other users. The flaw (CWE-639) stems from the application accepting user-controlled flow identifiers in API requests without verifying that the requesting account owns the targeted resource - a classic horizontal privilege escalation path. No public exploit code has been identified and the vulnerability is not listed in CISA KEV, but a vendor patch is available via IBM Security Advisory.
Server-side request forgery in IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated low-privilege attacker to coerce the application server into issuing arbitrary outbound HTTP requests, enabling internal network enumeration and potentially pivoting to other attacks against backend infrastructure. The CVSS vector (PR:L/AV:N/AC:L) confirms this is exploitable over the network by any authenticated user without elevated permissions or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis; IBM has released a patch via their support portal.