low · CVSS v3 3.5

CVE-2026-13387

A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to…

Description

A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions.

Scores

Severity
low
CVSS v2
3.3
CVSS v3
3.5
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

low

CVE-2025-0166

IBM watsonx Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4-4.8.5 and 5.0.0-5.4.2 can expose sensitive source code that should not be publicly accessible. This vulnerability allows attackers to read internal code, potentially revealing business logic or proprietary algorithms. It is a low-severity issue but still poses a confidentiality risk.

View analysis

low

CVE-2026-102618

IBM i 7.6, 7.5, 7.4, and 7.3 allow an authenticated user to indirectly disable system auditing, potentially enabling malicious insiders to hide activity. The vulnerability is low severity but can undermine audit integrity. Defenders should address it promptly to preserve audit logs.

View analysis

low

CVE-2026-18194

IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.2 lack anti-clickjacking protections, allowing remote attackers to perform unauthorized actions via UI manipulation. This vulnerability affects the web interface of the integration platform. It is rated low severity due to the specific conditions required for exploitation.

View analysis

low

CVE-2026-84228

IBM Guardium Data Protection 12.2.4 contains an improper input validation flaw that allows a remote authenticated attacker to access sensitive information. This vulnerability requires prior authentication, limiting its exposure to users with valid credentials within the system.

View analysis