Enterprise Build Of Quarkus
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:enterprise_build_of_quarkus:3.27.1:*:*:*:*:*:*:*
part: a version: 3.27.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Enterprise Build Of Quarkus (238d3b3d-6bc8-56d9-8e91-4dc70ebd26b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-19625 |
vulnerable | 2026-09-16 04:34:15.582792 |
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
MEDIUM (5.3)
When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid token issued by the OIDC Provider 1 that can be used to access "/oidc-provider1" can also be used to access "/oidc-provider2" that is secured by another OIDC Provider 2.
Published: 2026-09-08T20:18:52.521Z
Updated: 2026-09-10T14:59:20.933Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-19651 |
vulnerable | 2026-09-16 04:34:15.403335 |
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
HIGH (7.4)
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Published: 2026-09-08T20:14:12.902Z
Updated: 2026-09-09T13:27:49.159Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-16308 |
vulnerable | 2026-09-16 04:32:57.177941 |
IBM Enterprise Build of Quarkus is affected by a DoS vulnerability
HIGH (7.5)
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header bytes.
Published: 2026-07-30T14:04:42.806Z
Updated: 2026-07-30T16:20:01.475Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.