Advisories · Technology

IBM Operational Decision Manager.

Every CVE that names IBM Operational Decision Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18658 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
- IBM Operational Decision Manager
- SQL injection
Not analysed yet 4 Sept 2026
CVE-2025-2824 CVE record

CVSS 7.4 High

IBM Operational Decision Manager HTTP open redirect
- IBM Operational Decision Manager
- Open redirect
Not analysed yet 1 Aug 2025
CVE-2025-1551 CVE record

CVSS 6.1 Medium

IBM Operational Decision Manager cross-site scripting
- IBM Operational Decision Manager
- Cross-site scripting (XSS)
Not analysed yet 29 Apr 2025
CVE-2024-22320 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

IBM Operational Decision Manager code execution
- IBM Operational Decision Manager
- Insecure deserialization
Not analysed yet 2 Feb 2024
CVE-2024-22319 CVE record

CVSS 8.1 HighCritical · CVSS 7+ and EPSS

IBM Operational Decision Manager JDNI injection
- IBM Operational Decision Manager
- Other injection
Not analysed yet 2 Feb 2024