Observability With Instana Agent

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:observability_with_instana_agent:build:*:*:*:*:*:*:*

part: a version: build update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductObservability With Instana Agent (5e150572-4b86-550f-bcb2-419556bc84ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19283 vulnerable 2026-09-16 04:34:15.739335 IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
HIGH (7.7)
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana Agent Operator could allow an authenticated remote attacker to obtain sensitive information, caused by missing destination namespace validation when copying etcd mTLS client credentials from the openshift-etcd system namespace into an attacker-controlled namespace.
Published: 2026-09-04T15:49:17.741Z
Updated: 2026-09-10T21:00:35.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-14893 vulnerable 2026-09-16 04:33:11.789814 IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image
HIGH (7.3)
IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API.
Published: 2026-07-28T20:36:57.507Z
Updated: 2026-07-29T14:10:41.839Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.