Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority CRITICAL 87

IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.73398 Published 2024-02-02 No fix listed CWE-502
Priority CRITICAL 88

IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.764 Published 2024-02-02 No fix listed CWE-74