Enterprise Build Of Quarkus

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:enterprise_build_of_quarkus:3.33.3:*:*:*:*:*:*:*

part: a version: 3.33.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductEnterprise Build Of Quarkus (238d3b3d-6bc8-56d9-8e91-4dc70ebd26b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-19625 vulnerable 2026-09-16 04:34:15.584476 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
MEDIUM (5.3)
When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid token issued by the OIDC Provider 1 that can be used to access "/oidc-provider1" can also be used to access "/oidc-provider2" that is secured by another OIDC Provider 2.
Published: 2026-09-08T20:18:52.521Z
Updated: 2026-09-10T14:59:20.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-19651 vulnerable 2026-09-16 04:34:15.407291 IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
HIGH (7.4)
IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5, and 3.33.1 through 3.33.3 could allow an attacker to bypass authorization by manipulating URL query parameters due to incorrect mapping of values to untrusted query string input.
Published: 2026-09-08T20:14:12.902Z
Updated: 2026-09-09T13:27:49.159Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.