Enterprise-Software

ManageEngine Eventlog Analyzer and Log360 versions prior to 13062 contain an authenticated remote code execution vulnerability in the log forwarding feature.

Multiple vulnerabilities in Veeam Management Pack for Microsoft System Center allow remote attackers to achieve arbitrary code execution on affected systems.

SAP has released security updates addressing four critical-severity vulnerabilities, including SSRF, code injection, and authorization bypasses, across multiple enterprise platforms.

An unauthenticated remote attacker can exploit a vulnerability across multiple Atlassian products, including Bamboo, Bitbucket, Confluence, Crucible, Fisheye, and Jira, to achieve unauthorized information disclosure.

IBM has released security patches addressing multiple vulnerabilities across DataStage on Cloud Pak for Data, Guardium Data Protection, and IBM i, including an incorrect permission assignment in the IBM i Network Authentication Service (CVE-2026-84414).

A vulnerability in TIBCO Administrator allows a remote, authenticated attacker to perform privilege escalation, potentially gaining unauthorized administrative access.

IBM App Connect Enterprise is affected by multiple vulnerabilities, including CVE-2024-45090 through CVE-2024-45094, which enable security bypass, denial-of-service, information disclosure, file manipulation, and cross-site scripting.

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a command injection vulnerability (CVE-2026-16346) that allows authenticated remote attackers to execute arbitrary OS commands.

Oracle has disclosed a series of 25 vulnerabilities affecting Hyperion, enabling remote, anonymous, or authenticated attackers to compromise system confidentiality, integrity, and availability.

A remote attacker can exploit CVE-2026-7769, an SQL injection vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway, to send specially crafted SQL statements, allowing them to view, add, modify, or delete information in the backend database.