Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-18658

IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Operational Decision Manager 9.6.0.0, 9.5.0.0, 8.11.1.0, 8.11.0.1, 8.12.0.1, 9.5.0.1, and 9.0.0.1 is vulnerable to SQL injection. An unauthenticated attacker can execute arbitrary SQL statements and leverage database functionality to write a web shell to the application web root, resulting in remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Operational Decision Manager

  • 9.6.0.0affected
  • 9.5.0.0affected
  • 8.11.1.0affected
  • 8.11.0.1affected
  • 8.12.0.1affected
  • 9.5.0.1affected
  • 9.0.0.1affected

References