CVE Vulnerability Catalog

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains improper neutralization of special characters in the PxPeek name property. A remote authenticated attacker could exploit this to execute arbitrary OS commands.

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to OS command injection. A remote authenticated attacker could exploit this to execute arbitrary commands.

IBM WebSphere Application Server versions 9.0 and 8.5 are affected by an authentication bypass vulnerability when using XD or Intelligent-Management features.

The PxXMLInput operator in IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to XML external entity (XXE) injection. A remote authenticated attacker could exploit this to obtain sensitive information.

IBM DataStage on Cloud Pak for Data 5.4.0.0 has an improper configuration of the XSLT transformation engine. A remote authenticated attacker could exploit this to execute arbitrary code.

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability. A remote authenticated attacker could exploit this to read, write, or delete arbitrary files.

IBM WebSphere Application Server 9.0 and 8.5 is affected by an authorization bypass vulnerability. The flaw allows access to resources without required permissions.

IBM WebSphere Application Server versions 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication and obtain sensitive information by sending a crafted unauthenticated request.

IBM WebSphere Application Server 9.0 and 8.5 is affected by a reflected cross-site scripting vulnerability.

IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet.

The ITE it82xx2 USB device-controller driver (drivers/usb/udc/udc_it82xx2.c) initializes its bus-suspend detection work item with k_work_init_delayable() inside it82xx2_enable(). Because it82xx2_disable() does not cancel the work, a disable-then-enable cycle re-initializes the still-pending work in place, corrupting kernel timeout/workqueue linked lists and causing a kernel panic.

The ITE IT82xx2 USB device-controller driver (udc_it82xx2.c) mishandles multi-packet OUT transfers on non-control endpoints. A buffer that is still being filled by DMA may be submitted to the upper USB stack, leading to use-after-free and double-free conditions.

IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 contain improper validation of file paths. A remote attacker could exploit this to perform an arbitrary file write.

Zephyr's TLS socket layer (subsys/net/lib/sockets/sockets_tls.c) keeps a process-global client_cache array of cached client session buffers shared by every TLS socket, with access serialized only by the per-socket ctx->lock mutex. Because CONFIG_NET_SOCKETS_TLS_MAX_CLIENT_SESSION_COUNT defaults to 1, two concurrent client sockets contend for the same slot, causing a use-after-free read and a double-free when two saves evict the same entry. This corrupts the mbedTLS heap; the fix adds a dedicated session_cache_lock mutex taken across every accessor of client_cache.

IBM WebSphere Application Server 9.0 and 8.5 is affected by blind server-side request forgery when processing SOAP requests.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling caused by improper parsing of the HTTP transfer-encoding request header. An attacker could poison the web cache, bypass web application firewall protection, and conduct XSS attacks.

IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 could allow a remote attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted website, an attacker could spoof the displayed URL to redirect a user to a malicious site that appears trusted.