CVE-2026-19625mediumCWE-284

CVE-2026-19625: falha de média gravidade em IBM Enterprise Build of Quarkus

IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Enterprise Build of Quarkus

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.3%
When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid token issued by the OIDC Provider 1 that can be used to access "/oidc-provider1" can also be used to access "/oidc-provider2" that is secured by another OIDC Provider 2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
IBM · Enterprise Build of Quarkus
CVEs relacionadas — IBM Enterprise Build of Quarkus

No mesmo produto, das mais perigosas para as menos.

CVE-2026-16308HIGHIBM Enterprise Build of Quarkus is affected by a DoS vulnerabilityEPSS 0.5%CVE-2026-19651HIGHIBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesEPSS 0.3%CVE-2026-77874HIGHIBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesEPSS 0.3%