Threats affecting pkg:maven/com.ibm/cyber-fraud

2 threats

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-9821IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper Medium5.32026-11-14GCVE DatabaseCVE-2026-9821 IBM Cyber Fraud versions 1.0.0 through 1.1.0 contain a vulnerability that allows an unauthorized user to inject data into log messages. This occurs due to improper neutralization of special elements when writing to log files, potentially leading to log injection attacks. Report on CVE-2026-9821 Vulnerability CWE-117 #ghsa-493r-633r-g34j	GCVE Database	2026-11-14
Low	2.5	CVE-2026-97683IBM Cyber Fraud · Protection Mechanism Failure Low2.52026-11-13CVE Database V5CVE-2026-97683 IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or misconfigured security context. Vulnerability CWE-693	CVE Database V5	2026-11-13

Page 1 of 1 · 1 duplicate CVE record merged