SB2026021822 - Multiple vulnerabilities in IBM webMethods Integration (on prem)

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026021822

SB2026021822 - Multiple vulnerabilities in IBM webMethods Integration (on prem)

Published: February 18, 2026

Security Bulletin ID SB2026021822
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Improper input validation (CVE-ID: CVE-2020-29582)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Signaling (Calico) component in Oracle Communications Cloud Native Core Network Slice Selection Function. A remote non-authenticated attacker can exploit this vulnerability to gain access to sensitive information.


2) Security features bypass (CVE-ID: CVE-2022-24329)

The vulnerability allows a remote user to bypass certain security restrictions.

The vulnerability exists due to unspecified error, related to the ability to lock dependencies for Kotlin Multiplatform Gradle projects.



Remediation

Install update from vendor's website.

References