IBM Operational Decision Manager 8.12.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:operational_decision_manager:8.12.0.1:*:*:*:*:*:*:*
part: a version: 8.12.0.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Operational Decision Manager (99d97d7f-936f-508f-b489-931ef13828bc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2824 |
vulnerable | 2026-06-08 07:16:58.435237 |
IBM Operational Decision Manager HTTP open redirect
HIGH (7.4)
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.
Published: 2025-08-01T17:46:30.472Z
Updated: 2025-08-01T18:07:22.830Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1551 |
vulnerable | 2026-06-08 07:08:37.282404 |
IBM Operational Decision Manager cross-site scripting
MEDIUM (6.1)
IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.
Published: 2025-04-29T15:41:43.471Z
Updated: 2025-08-28T15:03:15.862Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22320 |
vulnerable | 2026-06-08 06:29:34.534167 |
IBM Operational Decision Manager code execution
CRITICAL (9.8)
IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code in the context of SYSTEM. IBM X-Force ID: 279146.
Published: 2024-02-02T02:16:32.962Z
Updated: 2025-05-07T20:09:19.584Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-22319 |
vulnerable | 2026-06-08 06:29:34.525074 |
IBM Operational Decision Manager JDNI injection
HIGH (8.1)
IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI injection when passing an unchecked argument to a certain API. IBM X-Force ID: 279145.
Published: 2024-02-02T02:14:50.571Z
Updated: 2024-08-01T22:43:34.602Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.