Known vulnerabilities in Operational Decision Manager

Vendor: IBM Corporation
Software: Operational Decision Manager
Software CPE: cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 188
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Operational Decision Manager Operational Decision Manager is affected by 188 known vulnerabilities: 1 critical, 23 high, 114 medium, 50 low Critical High Medium Low

Vulnerabilities (188)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133400 - Use of Hard-coded Credentials
CVE-2026-44825		 CWE-798 High
No
No
 - 04.06.2026 SB20260604102
SB2026061737
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332		 CWE-444 Medium
No
No
 - 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 10 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795		 CWE-226 High
No
No
 - 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 5 more
#VU123576 - Improper input validation
CVE-2025-11143		 CWE-20 Low
No
No
 - 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 12 more
#VU121931 - Improper Authorization
CVE-2026-22022		 CWE-285 Low
No
No
 - 22.01.2026 SB2026012211
SB2026042288
SB2026061737
#VU121930 - Permissions, Privileges, and Access Controls
CVE-2026-22444		 CWE-264 Medium
No
No
 - 22.01.2026 SB2026012211
SB2026061737
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383		 CWE-362 Medium
No
No
 8.11.0.1 Interim fix 54, 8.11.1 Interim fix 53, 8.12.0.1 Interim fix 37, 9.0.0.1 Interim fix 22, 9.5.0.1 Interim fix 5 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU117323 - Cross-Site Request Forgery (CSRF)
CVE-2025-41254		 CWE-352 Medium
No
No
 8.11.0.1 Interim fix 54, 8.11.1 Interim fix 53, 8.12.0.1 Interim fix 37, 9.0.0.1 Interim fix 22, 9.5.0.1 Interim fix 5 16.10.2025 SB2025101638
SB2025121921
SB2026012235
and 3 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 54 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU113023 - Exposure of sensitive information to an unauthorized actor
CVE-2025-22227		 CWE-200 Medium
No
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 17.07.2025 SB2025071765
SB2025072908
SB2025112532
and 6 more
#VU112257 - Improper input validation
CVE-2025-31672		 CWE-20 Medium
No
No
 8.11.0.1 Interim fix 54, 8.11.1 Interim fix 53, 8.12.0.1 Interim fix 37, 9.0.0.1 Interim fix 22, 9.5.0.1 Interim fix 5 04.07.2025 SB20250704104
SB2025070708
SB2025071664
and 23 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU105881 - Security Features
CVE-2025-22228		 CWE-254 Low
No
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 19.03.2025 SB2025031966
SB2025040327
SB2025061733
and 24 more
#VU103325 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-52012		 CWE-22 Medium
No
No
 - 27.01.2025 SB2025012737
SB2025041544
SB2026022019
#VU103324 - Permissions, Privileges, and Access Controls
CVE-2025-24814		 CWE-264 Low
No
No
 - 27.01.2025 SB2025012737
SB2025041544
SB2025071613
and 1 more
#VU98527 - Insufficient Verification of Data Authenticity
CVE-2024-45217		 CWE-345 Medium
No
No
 - 15.10.2024 SB2024101504
SB2024121856
SB2025021263
and 1 more
#VU98526 - Improper Authentication
CVE-2024-45216		 CWE-287 Medium
Available
No
 - 15.10.2024 SB2024101504
SB2024121856
SB2025021263
and 1 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more


Showing elements 1 - 20 out of 188