Known vulnerabilities in Operational Decision Manager - page 2
Vendor:
IBM Corporation
Software:
Operational Decision Manager
Software CPE:
cpe:2.3:a:ibm_corporation:operational_decision_manager:*:*:*:*:*:*:*:*
Website:
https://www.ibm.com/us-en
Total vulnerabilities:
188
Public exploits:
20
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.5.0.1 Interim fix 5
9.0.0.1 Interim fix 22
8.12.0.1 Interim fix 37
8.11.1 Interim fix 53
8.11.0.1 Interim fix 54
9.0.0.0
9.5.0.0 Interim fix 7
9.0.0.1 Interim fix 15
8.12.0.1 Interim fix 31
8.11.1 Interim fix 47
8.11.0.1 Interim fix 49
9.5.0.0 Interim fix 2
9.0.0.1 Interim fix 11
8.12.0.1 Interim fix 28
8.11.1 Interim fix 44
8.11.0.1 Interim fix 46
9.5.0
9.0.0.1
8.12.0.1
8.11.1.0
8.11.0.1
9.0.0.0 Interim fix 6
9.0.0.0 Interim fix 5
9.0.0.0 Interim fix 3
9.0.0.0 Interim fix 1
9.0.0.1 Interim fix 7
8.12.0.1 Interim fix 24
8.11.1.0 Interim fix 39
8.11.0.1 Interim fix 42
9.0.0.1 Interim fix 4
8.12.0.1 Interim fix 15
8.11.1 Interim fix 31
8.11.0.1 Interim fix 36
9.0.0.1 Interim fix 2
8.12.0.1 Interim fix 18
8.11.1 Interim fix 34
8.11.0.1 Interim fix 039
8.11.0.1 Interim fix 037
9.0.0.0 Interim fix 2
8.12.0.1 Interim fix 13
8.11.1 Interim fix 28
8.11.0.1 Interim fix 34
8.12.0.1 Interim fix 10
8.11.1 Interim fix 25
8.11.0.1 Interim fix 32
8.10.5.2 Interim fix 1
8.11.0.1 Interim fix 30
8.11.1 Interim fix 24
8.12.0.1 Interim fix 5
8.12.0.1 Interim fix 3
8.11.1 Interim fix 21
8.11.0.1 Interim fix 29
8.10.5.1 Interim fix 54
8.11.0.1 Interim fix 18
8.11.1 Interim fix 7
8.10.5.1 Interim fix 36
8.12.0.1 Interim fix 2
8.11.1 Interim fix 20
8.11.0.1 Interim fix 28
8.10.5.1 Interim fix 53
8.12.0.1 Interim fix 1
8.11.1 Interim fix 19
8.11.0.1 Interim fix 27
8.10.5.1 Interim fix 51
8.12.0 Interim fix 8
8.11.0.1 Interim fix 26
8.10.5.1 Interim fix 49
8.12.0 Interim fix 6
8.11.1 Interim fix 15
8.11.0.1 Interim fix 25
8.10.5.1 Interim fix 47
8.12.0 Interim fix 5
8.11.1 Interim fix 13
8.11.0.1 Interim fix 24
8.10.5.1 Interim fix 44
8.12.0 Interim fix 4
8.11.1 Interim fix 12
8.11.0.1 Interim fix 23
8.10.5.1 Interim fix 43
8.12.0 Interim fix 2
8.11.1 Interim fix 10
8.10.5.1 Interim fix 41
8.12.0 Interim fix 1
8.11.1 Interim fix 9
8.11.0.1 Interim fix 21
8.10.5.1 Interim fix 39
8.11.1 Interim fix 8
8.11.0.1 Interim fix 20
8.10.5.1 Interim fix 38
8.11.1 Interim fix 5
8.11.0.1 Interim fix 17
8.10.5.1 Interim fix 34
8.11.1 Interim fix 4
8.11.0.1 Interim fix 15
8.10.5.1 Interim fix 33
8.11
8.10.5.1
8.10.5
8.10.4
7.5
8.0
8.5
8.9.2.1
8.8.1.3
8.7.1.2
8.6.0.3
8.9
8.8
8.7
8.6
Vulnerabilities (188)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU113623 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2025-2824 |
CWE-601 | Medium | 8.11.0.1 Interim fix 46, 8.11.1 Interim fix 44, 8.12.0.1 Interim fix 28, 9.0.0.1 Interim fix 11, 9.5.0.0 Interim fix 2 | 05.08.2025 |
SB2025080509 |
||
| #VU109251 - Security Features CVE-2025-22233 |
CWE-254 | Low | 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 | 16.05.2025 |
SB2025051612 SB2025060628 SB2025062507 and 20 more |
||
| #VU108043 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-1551 |
CWE-79 | Medium | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 29.04.2025 |
SB2025042925 |
||
| #VU107966 - Missing Authorization CVE-2025-22235 |
CWE-862 | Medium | 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 | 25.04.2025 |
SB2025042526 SB2025060429 SB2025060529 and 15 more |
||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 88 more |
||
| #VU103769 - Resource exhaustion CVE-2025-25193 |
CWE-400 | Low | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 11.02.2025 |
SB2025021186 SB202502197190 SB2025030409 and 56 more |
||
| #VU103149 - Improper input validation CVE-2023-7272 |
CWE-20 | High | 8.11.0.1 Interim fix 46, 8.11.1 Interim fix 44, 8.12.0.1 Interim fix 28, 9.0.0.1 Interim fix 11, 9.5.0.0 Interim fix 2 | 21.01.2025 |
SB2025012230 SB2025012238 SB2025071038 and 1 more |
||
| #VU101974 - Deserialization of Untrusted Data CVE-2024-52046 |
CWE-502 | High | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 28.12.2024 |
SB2024122801 SB20250117140 SB2025020549 and 22 more |
||
| #VU100780 - Exposure of sensitive information to an unauthorized actor CVE-2024-31141 |
CWE-200 | Medium | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 21.11.2024 |
SB2024112150 SB2024120226 SB2024120331 and 34 more |
||
| #VU100680 - Improper input validation CVE-2024-38828 |
CWE-20 | Medium | 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 | 20.11.2024 |
SB2024112009 SB2025021262 SB2025040424 and 16 more |
||
| #VU100676 - Improper Authorization CVE-2024-38827 |
CWE-285 | Medium | 8.11.0.1 Interim fix 039, 8.11.1 Interim fix 34, 8.12.0.1 Interim fix 18, 9.0.0.1 Interim fix 2 | 19.11.2024 |
SB2024111987 SB2025012185 SB2025012188 and 30 more |
||
| #VU100259 - Resource Management Errors CVE-2024-47535 |
CWE-399 | Low | 8.11.0.1 Interim fix 039, 8.11.1 Interim fix 34, 8.12.0.1 Interim fix 18, 9.0.0.1 Interim fix 2 | 12.11.2024 |
SB2024111299 SB2024122313 SB2025012061 and 79 more |
||
| #VU99975 - Authentication Bypass by Spoofing CVE-2024-51504 |
CWE-290 | High | 8.11.0.1 Interim fix 039, 8.11.1 Interim fix 34, 8.12.0.1 Interim fix 18, 9.0.0.1 Interim fix 2 | 06.11.2024 |
SB2024110667 SB2024121231 SB2024122015 and 12 more |
||
| #VU99267 - Improper Authorization CVE-2024-38821 |
CWE-285 | Medium | 8.11.0.1 Interim fix 039, 8.11.1 Interim fix 34, 8.12.0.1 Interim fix 18, 9.0.0.1 Interim fix 2 | 23.10.2024 |
SB2024102307 SB2024112849 SB2024112910 and 13 more |
||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 | 17.10.2024 |
SB2024101781 SB2024112849 SB2024120331 and 54 more |
||
| #VU98795 - Security Features CVE-2024-38820 |
CWE-254 | Medium | 8.11.0.1 Interim fix 49, 8.11.1 Interim fix 47, 8.12.0.1 Interim fix 31, 9.0.0.1 Interim fix 15, 9.5.0.0 Interim fix 7 | 17.10.2024 |
SB2024101781 SB2024112618 SB2024120428 and 40 more |
||
| #VU98517 - Resource exhaustion CVE-2024-8184 |
CWE-400 | Medium | 8.11.0.1 Interim fix 42, 8.11.1.0 Interim fix 39, 8.12.0.1 Interim fix 24, 9.0.0.1 Interim fix 7 | 14.10.2024 |
SB20241014108 SB2024101836 SB2024112849 and 38 more |
||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | 8.11.0.1 Interim fix 037 | 03.10.2024 |
SB2024100352 SB2024100421 SB2024101007 and 132 more |
||
| #VU84091 - Cleartext Transmission of Sensitive Information CVE-2023-5384 |
CWE-319 | Low | 8.11.0.1 Interim fix 36, 8.11.1 Interim fix 31, 8.12.0.1 Interim fix 15, 9.0.0.1 Interim fix 4 | 12.12.2023 |
SB2023121203 SB2025032016 |
||
| #VU81430 - Resource Management Errors CVE-2023-5236 |
CWE-399 | Low | 8.11.0.1 Interim fix 36, 8.11.1 Interim fix 31, 8.12.0.1 Interim fix 15, 9.0.0.1 Interim fix 4 | 03.10.2023 |
SB2023100337 SB2025032016 |
Showing elements 21 - 40 out of 188