IBM DataStage on Cloud Pak for Data version 5.4.0.0 contains a server-side request forgery (SSRF) vulnerability that could allow a remote authenticated attacker to obtain sensitive information. The vulnerability requires authentication and does not involve user interaction. It has a medium severity rating with a CVSS score of 6.4.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 contain a vulnerability that allows attackers to replay identity propagation claim signatures or expose sensitive user identity information to third-party MCP servers. This occurs due to the use of static signature payloads and the absence of per-gateway configuration checks during tool invocation. The vulnerability has a high severity rating with a CVSS score of 7.4.
Devolutions PowerShell Universal versions 2026.3.4 and earlier have incorrect default permissions on the agent configuration folder. This vulnerability allows a local unprivileged user to execute arbitrary code with SYSTEM privileges by crafting a malicious agent configuration file that directs the agent to an attacker-controlled server.
IBM webMethods Integration Server versions 10.15 and 11.1 have a vulnerability that could allow a remote attacker to obtain sensitive information. This exposure involves server-side environment variables and Java runtime details, which could aid an attacker in further attacks or reconnaissance.
A flaw in abrt's mitigation for CVE-2026-54228 and CVE-2026-54229 allows local attackers to bypass the completeness check by creating a 'count' element in dump directories. This enables poisoning or ownership seizure of dump directories during privileged ABRT handler processing. The issue stems from an incomplete fix that leaves certain mutating methods ungated, allowing unauthorized modification and access. Mitigation involves disabling or removing ABRT if not required and restricting local user access.
A CWE-922 Insecure Storage of Sensitive Information vulnerability affects multiple Johnson Controls iSTAR Ultra product lines prior to version 6.9.2.CU02. This vulnerability allows file manipulation as described by CAPEC-15. The issue has a medium severity with a CVSS score of 6.3. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data.
IBM Cyber Fraud versions 1.0.0 through 1.1.0 contain a vulnerability that could allow an attacker with local access to a container to extract sensitive information. This issue arises from unrestrictive network policies within the affected versions. The vulnerability has a medium severity rating with a CVSS score of 4. No known exploits are reported in the wild, and no patches or fixes have been explicitly stated.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a server-side request forgery (SSRF) vulnerability. An authenticated attacker could exploit this flaw to send unauthorized requests from the affected system, potentially enabling network enumeration or aiding other attacks. The vulnerability has a medium severity rating with a CVSS score of 5.4. No patch or remediation information is currently provided.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain an improper access control vulnerability in the bulk import functionality. A remote authenticated attacker with team-scoped admin.import permission can overwrite endpoint URLs, request headers, and authentication credentials of public tools, resources, and prompts owned by other tenants by sending a crafted POST request to the /v1/import endpoint with conflict_strategy=update. This can redirect subsequent AI gateway invocations to an attacker-controlled host.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.1.0 have a vulnerability in improper credential handling. The X-Upstream-Authorization request header can override the gateway-managed upstream credentials for OAuth, bearer, and basic authenticated gateways. This flaw allows an authenticated user to make upstream requests with different credentials, bypassing per-user permission checks and audit attribution.
IBM App Connect Operator and App Connect Enterprise Certified Containers Operands contain a vulnerability that allows an attacker with the ability to run HTTP calls within the running container to make administrative calls to a running IntegrationRuntime. This could lead to high impact on integrity and availability without affecting confidentiality. The vulnerability has a medium severity score of 6.0 and requires high privileges to exploit.
A vulnerability in IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log sensitive information about the deployed environment within error messages. This exposure could lead to unauthorized disclosure of sensitive data.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a vulnerability where an authenticated user can bypass upstream credential-level authorization policies. This occurs due to an insufficiently specific cache key in the RFC 8693 token exchange cache, allowing reuse of cached upstream bearer tokens across different credentials of the same user. The vulnerability has a medium severity rating with a CVSS score of 5.4.
A use of default credentials vulnerability exists in multiple Johnson Controls iSTAR Ultra product lines, including iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2. This vulnerability allows unauthorized access due to the use of default credentials. The affected versions are those prior to 2.9.2.CU02 for iSTAR Ultra and prior to 6.9.2.CU02 for the other listed products. The vulnerability is assigned CVE-2025-53697 and has a high severity rating with a CVSS score of 8.4.
IBM ContextForge MCP Gateway versions 1.0.0 through 1.0.11 contain a cross-site scripting (XSS) vulnerability. This flaw allows a privileged user to inject arbitrary JavaScript code into the web user interface, which can alter the intended functionality and potentially lead to credential disclosure within a trusted session. The vulnerability has a medium severity rating with a CVSS score of 4.8.
Devolutions PowerShell Universal versions 2026.3.4 and earlier contain an incorrect privilege assignment vulnerability in the app token management component. This flaw allows an authenticated user with token creation or update permissions to escalate their privileges to administrator. Additionally, in multi-node deployments, a revoked app token can be reinstated by crafting app token requests that set arbitrary roles or revocation states.
IBM ContextForge MCP Gateway versions 1.0.8 through 1.0.11 and 1.1.0 contain a denial of service vulnerability due to an incomplete denylist in the jq filter guard module. An authenticated remote attacker can exploit this by supplying a crafted jsonpath_filter value that bypasses safety checks, causing worker process termination or resource exhaustion. The vulnerability is identified as CWE-184 and has a CVSS 3.1 score of 6.5 (medium severity). No patch or remediation information is currently provided.
A vulnerability in Johnson Controls iSTAR Ultra and iSTAR Ultra SE devices prior to version 6.9.2.CU02 allows functionality bypass due to a missing protection mechanism for an alternate hardware interface. This security flaw is identified as CVE-2025-53698 and is classified with a high severity score of 7. The issue affects versions before 6.9.2.CU02 and relates to CWE-1299. No public exploits or patches are currently documented.
A vulnerability exists in multiple Johnson Controls iSTAR Ultra series devices due to a missing protection mechanism for an alternate hardware interface. This flaw allows functionality bypass as described by CAPEC-554. The affected products include iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, and iSTAR Edge G2 versions prior to 6.9.2.CU02.
CVE-2025-43874 is an OS Command Injection vulnerability affecting multiple Johnson Controls iSTAR Ultra product lines prior to version 6.9.2.CU02. The flaw involves improper neutralization of special elements in OS commands, which could allow an attacker with limited privileges to execute arbitrary OS commands. The vulnerability has a high severity score of 8.7 but no known exploits in the wild have been reported. A fixed version 6.9.2.CU02 or later is indicated, though no explicit patch link is provided.