Skip to content
OpenAdvisories
Medium WID-SEC-2026-0871 3 CVEs

IBM Operational Decision Manager: Mehrere Schwachstellen

Published Mar 25, 2026 · Updated Mar 25, 2026 · de-DE

Vendor: IBM Product: Operational Decision Manager Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Operational Decision Manager ausnutzen, um Sicherheitsvorkehrungen zu umgehen, und um Dateien zu manipulieren.

Product

IBM Operational Decision Manager ist Software für die Integration von Geschäftsereignissen und Geschäftsregeln, um Entscheidungen über verschiedene Prozesse und Anwendungen hinweg zu automatisieren.

Vulnerabilities 3

  • Critical 9.4
    CVE-2025-12383

    Race Condition allows Bypass of Trust Restrictions

    In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under norma…

    Eclipse Foundation Jersey celeborn-0.6 neo4j-2025.10 Wolfi Maven
  • Medium 5.3
    CVE-2025-31672

    Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names

    Improper Input Validation vulnerability in Apache POI. The issue affects the parsing of OOXML format files like xlsx, docx and pptx. These file formats are basically zip files and it is possible for malicious users to add zip entries with duplicate names (inc…

    Apache Software Foundation Apache POI opensearch-2 libapache-poi-java Debian Ubuntu Wolfi Maven
  • Medium 4.3
    CVE-2025-41254

    Spring Framework STOMP CSRF Vulnerability

    STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework: * 6.2.0 - 6.2.11 * 6.1.0 - 6.1.23 * 6.0.x - 6.0.29 * 5.3.0 - 5.3.45 * Older,…

    VMware Spring Framework thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven

Revision history

  1. #1

    Initiale Fassung

References