SO
Vendor
Softwareag
18
CVEs
0
On KEV
0
New 30D
Products
WI9.9
webMethods Integration Server
IBM
7 CVEs0 on KEV0 new
MN9.8
Mashzone Nextgen
Softwareag
4 CVEs0 on KEV0 new
AR6.8
Aris
Softwareag
2 CVEs0 on KEV0 new
CO6.5
Connx
Softwareag
2 CVEs0 on KEV0 new
QU9.8
Quartz
Softwareag
2 CVEs0 on KEV0 new
TS9.8
Terracotta Server Oss
Softwareag
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-66837 | AR Aris Softwareag | 6.8 | Jan 7 | A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware |
| CVE-2025-66838 | AR Aris Softwareag | 6.5 | Jan 7 | In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, allowing users to upload files at an unrestricted rate |
| CVE-2025-36049 | WI webMethods Integration Server IBM | 8.8 | Jun 18 | IBM webMethods Integration Sever XML external entity injection |
| CVE-2025-36048 | WI webMethods Integration Server IBM | 7.2 | Jun 18 | IBM webMethods Integration Sever code execution |
| CVE-2024-45074 | WI webMethods Integration IBM | 6.5 | Sep 4 | IBM webMethods Integration directory traversal |
| CVE-2024-45075 | WI webMethods Integration IBM | 8.8 | Sep 4 | IBM webMethods Integration privilege escalation |
| CVE-2024-45076 | WI webMethods Integration IBM | 9.9 | Sep 4 | IBM webMethods Integration code execution |
| CVE-2023-6578 | WE Webmethods Softwareag | 6.5 | Dec 7 | Software AG WebMethods access control |
| CVE-2023-0925 | WE Webmethods Softwareag | 9.8 | Sep 6 | Software AG webMethods OneData Deserialization Vulnerability |
| CVE-2023-39017 | QU Quartz Softwareag | 9.8 | Jul 28 | quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute |
| CVE-2021-40650 | CO Connx Softwareag | 6.5 | Jun 14 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the secure flag set |
| CVE-2021-40649 | CO Connx Softwareag | 6.5 | Jun 14 | In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set |
| CVE-2021-33207 | MN Mashzone Nextgen Softwareag | 9.8 | Apr 5 | The HTTP client in MashZone NextGen through 10.7 GA deserializes untrusted data when it gets an HTTP response with a 570 status code |
| CVE-2021-33523 | MN Mashzone Nextgen Softwareag | 7.2 | Mar 30 | MashZone NextGen through 10.7 GA allows a remote authenticated user, with access to the admin console, to upload a new JDBC driver that can execute arbitrary commands on the… |
| CVE-2021-33581 | MN Mashzone Nextgen Softwareag | 7.2 | Mar 30 | MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a… |
| CVE-2021-33208 | MN Mashzone Nextgen Softwareag | 7.2 | Mar 30 | The "Register an Ehcache Configuration File" admin feature in MashZone NextGen through 10.7 GA allows XXE attacks via a malicious XML configuration file |
| CVE-2020-35469 | TS Terracotta Server Oss Softwareag | 9.8 | Dec 16 | The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user |
| CVE-2019-13990 | QU Quartz Softwareag | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description |