Ibm Operational Decision Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Ibm Operational Decision Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2024-22320 — CVSS 9.8 (critical): IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an…
• CVE-2024-22319 — CVSS 8.1 (high): IBM Operational Decision Manager 8.10.3, 8.10.4, 8.10.5.1, 8.11, 8.11.0.1, 8.11.1 and 8.12.0.1 is susceptible to remote code execution…
• CVE-2025-2824 — CVSS 7.4 (high): IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to conduct phishing…
• CVE-2018-1821 — CVSS 7.1 (high): IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when…
• CVE-2025-1551 — CVSS 6.1 (medium): IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, and 9.0.0.1 is vulnerable to cross-site scripting. This vulnerability allows…
• CVE-2014-0944 — CVSS 6.0 (medium): Cross-site request forgery (CSRF) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before…
• CVE-2014-6114 — CVSS 5.0 (medium): The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere…
• CVE-2014-0946 — CVSS 4.3 (medium): The RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3 IF37, 8.0 before MP1 FP2, and 8.5 before MP1…
• CVE-2014-0945 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the RES Console in Rule Execution Server in IBM Operational Decision Manager 7.5 before FP3…