Filtered by vendor Ibm
Subscriptions
Filtered by product Bob
Subscriptions
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-5514 | 1 Ibm | 1 Bob | 2026-11-13 | 3.3 Low |
| IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API. The token is exposed in the account identifier field during account enumeration, without requiring explicit user consent. This may allow malicious extensions to access sensitive session information and potentially perform unauthorized actions on behalf of the user. | ||||
| CVE-2026-9764 | 1 Ibm | 2 Bob, Bob Shell | 2026-11-09 | 8.8 High |
| IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper control of user input code. | ||||
Page 1 of 1.