Skip to content
OpenAdvisories
Medium WID-SEC-2025-1698 2 CVEs

IBM Operational Decision Manager: Mehrere Schwachstellen

Published Jul 31, 2025 · Updated Aug 3, 2025 · Revision 2 · de-DE

Vendor: IBM Product: Operational Decision Manager Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM Operational Decision Manager ausnutzen, um einen Denial of Service oder einen Redirection Angriff durchzuführen.

Product

IBM Operational Decision Manager ist Software für die Integration von Geschäftsereignissen und Geschäftsregeln, um Entscheidungen über verschiedene Prozesse und Anwendungen hinweg zu automatisieren.

Vulnerabilities 2

  • High 8.6
    CVE-2023-7272

    Eclipse Parsson stack overflow with deeply nested objects

    In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON…

    Eclipse Foundation Parsson org.eclipse.parsson:parsson Maven
  • High 7.4
    CVE-2025-2824

    IBM Operational Decision Manager HTTP open redirect

    IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could e…

    IBM Operational Decision Manager

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2025-23389

  2. #1

    Initiale Fassung

References