Operational Decision Manager (Ibm) - vulnerabilities (CVEs)

10 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2026-09-04. Vendor: Ibm.

CVEs of Operational Decision Manager

CVE-2026-18658 - CVSS 9.8 (critical), 2026-09-04: IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated…
CVE-2025-2824 - CVSS 7.4 (high), 2025-08-01: IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open…
CVE-2025-1551 - CVSS 6.1 (medium), 2025-04-29: IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated…
CVE-2024-22320 - CVSS 9.8 (critical), 2024-02-02: IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unsafe…
CVE-2024-22319 - CVSS 9.8 (critical), 2024-02-02: IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution attack via JNDI…
CVE-2018-1821 - CVSS 9.1 (critical), 2018-12-13: IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A…
CVE-2014-6114 - CVSS 5 (medium), 2014-12-11: The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision…
CVE-2014-0945 - CVSS 3.5 (low), 2014-05-09: Cross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1…
CVE-2014-0944 - CVSS 6 (medium), 2014-05-09: Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0…
CVE-2014-0946 - CVSS 4.3 (medium), 2014-05-09: The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1 IF26 does not send…