{"$ref":"https://www.cert.ssi.gouv.fr/openapi.json","affected_systems":[{"description":"AIX versions 7.2.5 sans le correctif de s\u00e9curit\u00e9 IJ55968 SP11","product":{"name":"AIX","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 11.0.2.0 sans le correctif de s\u00e9curit\u00e9 PH68819","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"QRadar Network Packet Capture versions 7.5.x ant\u00e9rieures \u00e0 QRadar Network Packet Capture 7.5.0 Update Package 14","product":{"name":"QRadar","vendor":{"name":"IBM","scada":false}}},{"description":"AIX versions 7.3.2 sans le correctif de s\u00e9curit\u00e9 IJ56113","product":{"name":"AIX","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 11.0.1.1 sans le correctif de s\u00e9curit\u00e9 PH68819","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 11.0.0.0 sans le correctif de s\u00e9curit\u00e9 PH68266","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"WebSphere Application Server versions 9.0.x sans le correctif de s\u00e9curit\u00e9  9.0.5.27","product":{"name":"WebSphere","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 10.1.1.1 sans le correctif de s\u00e9curit\u00e9 PH68266","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"Db2 versions 11.5.x sans le dernier correctif de s\u00e9curit\u00e9 ","product":{"name":"Db2","vendor":{"name":"IBM","scada":false}}},{"description":"Tivoli Application Dependency Discovery Manager versions 7.3.x \u00e0 7.3.0.12 sans le correctif de s\u00e9curit\u00e9 efix_CVE-2025-48976_FP12250331.zip","product":{"name":"Tivoli","vendor":{"name":"IBM","scada":false}}},{"description":"QRadar DNS Analyzer App versions ant\u00e9rieures \u00e0 2.0.4","product":{"name":"N/A","vendor":{"name":"IBM","scada":false}}},{"description":"Db2 versions 12.1.x ant\u00e9rieures \u00e0 12.1.3 sans le dernier correctif de s\u00e9curit\u00e9 ","product":{"name":"Db2","vendor":{"name":"IBM","scada":false}}},{"description":"WebSphere Application Server Liberty versions 17.0.0.3 \u00e0 25.0.0.11 sans le correctif de s\u00e9curit\u00e9 25.0.0.12","product":{"name":"WebSphere","vendor":{"name":"IBM","scada":false}}},{"description":"WebSphere Application Server versions 8.5.x sans le correctif de s\u00e9curit\u00e9  8.5.5.29","product":{"name":"WebSphere","vendor":{"name":"IBM","scada":false}}},{"description":"AIX versions 7.3.1 sans le correctif de s\u00e9curit\u00e9 IJ56230","product":{"name":"AIX","vendor":{"name":"IBM","scada":false}}},{"description":"Cognos Analytics Certified Containers versions 1.2.1.x ant\u00e9rieures \u00e0 12.1.1","product":{"name":"Cognos Analytics","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 10.1.2.1 sans le correctif de s\u00e9curit\u00e9 PH68266","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"Db2 versions 11.1.x sans le dernier correctif de s\u00e9curit\u00e9 ","product":{"name":"Db2","vendor":{"name":"IBM","scada":false}}},{"description":"Sterling Transformation Extender versions 10.1.0.2 sans le correctif de s\u00e9curit\u00e9 PH68266","product":{"name":"Sterling","vendor":{"name":"IBM","scada":false}}},{"description":"AIX versions 7.3.3 sans le correctif de s\u00e9curit\u00e9 IJ55897 SP2","product":{"name":"AIX","vendor":{"name":"IBM","scada":false}}},{"description":"Storage Protect Operations Center versions 8.1.x ant\u00e9rieures \u00e0 8.1.27.100","product":{"name":"Storage Protect","vendor":{"name":"IBM","scada":false}}},{"description":"QRadar SIEM versions 7.5 \u00e0 7.5.0 IP14 sans les correctif de s\u00e9curit\u00e9 QRadar 7.5.0 UP14 IF01 et 7.5.0 QRadar Protocol MicrosoftAzureEventHubs ","product":{"name":"QRadar SIEM","vendor":{"name":"IBM","scada":false}}}],"affected_systems_content":"","content":"## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l'\u00e9diteur pour l'obtention des correctifs (cf. section Documentation).","cves":[{"name":"CVE-2025-6395","url":"https://www.cve.org/CVERecord?id=CVE-2025-6395"},{"name":"CVE-2025-22026","url":"https://www.cve.org/CVERecord?id=CVE-2025-22026"},{"name":"CVE-2024-1597","url":"https://www.cve.org/CVERecord?id=CVE-2024-1597"},{"name":"CVE-2023-1370","url":"https://www.cve.org/CVERecord?id=CVE-2023-1370"},{"name":"CVE-2025-36236","url":"https://www.cve.org/CVERecord?id=CVE-2025-36236"},{"name":"CVE-2025-49812","url":"https://www.cve.org/CVERecord?id=CVE-2025-49812"},{"name":"CVE-2025-39757","url":"https://www.cve.org/CVERecord?id=CVE-2025-39757"},{"name":"CVE-2023-46308","url":"https://www.cve.org/CVERecord?id=CVE-2023-46308"},{"name":"CVE-2024-49350","url":"https://www.cve.org/CVERecord?id=CVE-2024-49350"},{"name":"CVE-2025-36251","url":"https://www.cve.org/CVERecord?id=CVE-2025-36251"},{"name":"CVE-2025-49146","url":"https://www.cve.org/CVERecord?id=CVE-2025-49146"},{"name":"CVE-2025-55752","url":"https://www.cve.org/CVERecord?id=CVE-2025-55752"},{"name":"CVE-2025-38461","url":"https://www.cve.org/CVERecord?id=CVE-2025-38461"},{"name":"CVE-2025-7962","url":"https://www.cve.org/CVERecord?id=CVE-2025-7962"},{"name":"CVE-2025-36250","url":"https://www.cve.org/CVERecord?id=CVE-2025-36250"},{"name":"CVE-2024-35255","url":"https://www.cve.org/CVERecord?id=CVE-2024-35255"},{"name":"CVE-2025-50106","url":"https://www.cve.org/CVERecord?id=CVE-2025-50106"},{"name":"CVE-2025-38527","url":"https://www.cve.org/CVERecord?id=CVE-2025-38527"},{"name":"CVE-2025-38449","url":"https://www.cve.org/CVERecord?id=CVE-2025-38449"},{"name":"CVE-2022-41946","url":"https://www.cve.org/CVERecord?id=CVE-2022-41946"},{"name":"CVE-2025-39730","url":"https://www.cve.org/CVERecord?id=CVE-2025-39730"},{"name":"CVE-2025-1992","url":"https://www.cve.org/CVERecord?id=CVE-2025-1992"},{"name":"CVE-2025-30754","url":"https://www.cve.org/CVERecord?id=CVE-2025-30754"},{"name":"CVE-2025-36097","url":"https://www.cve.org/CVERecord?id=CVE-2025-36097"},{"name":"CVE-2020-16971","url":"https://www.cve.org/CVERecord?id=CVE-2020-16971"},{"name":"CVE-2022-3510","url":"https://www.cve.org/CVERecord?id=CVE-2022-3510"},{"name":"CVE-2022-3509","url":"https://www.cve.org/CVERecord?id=CVE-2022-3509"},{"name":"CVE-2025-4565","url":"https://www.cve.org/CVERecord?id=CVE-2025-4565"},{"name":"CVE-2025-5318","url":"https://www.cve.org/CVERecord?id=CVE-2025-5318"},{"name":"CVE-2025-36186","url":"https://www.cve.org/CVERecord?id=CVE-2025-36186"},{"name":"CVE-2024-56347","url":"https://www.cve.org/CVERecord?id=CVE-2024-56347"},{"name":"CVE-2025-37797","url":"https://www.cve.org/CVERecord?id=CVE-2025-37797"},{"name":"CVE-2025-61795","url":"https://www.cve.org/CVERecord?id=CVE-2025-61795"},{"name":"CVE-2024-7254","url":"https://www.cve.org/CVERecord?id=CVE-2024-7254"},{"name":"CVE-2024-52533","url":"https://www.cve.org/CVERecord?id=CVE-2024-52533"},{"name":"CVE-2023-53125","url":"https://www.cve.org/CVERecord?id=CVE-2023-53125"},{"name":"CVE-2025-32990","url":"https://www.cve.org/CVERecord?id=CVE-2025-32990"},{"name":"CVE-2025-2518","url":"https://www.cve.org/CVERecord?id=CVE-2025-2518"},{"name":"CVE-2025-41244","url":"https://www.cve.org/CVERecord?id=CVE-2025-41244"},{"name":"CVE-2022-49985","url":"https://www.cve.org/CVERecord?id=CVE-2022-49985"},{"name":"CVE-2025-50059","url":"https://www.cve.org/CVERecord?id=CVE-2025-50059"},{"name":"CVE-2025-1493","url":"https://www.cve.org/CVERecord?id=CVE-2025-1493"},{"name":"CVE-2025-38556","url":"https://www.cve.org/CVERecord?id=CVE-2025-38556"},{"name":"CVE-2023-26133","url":"https://www.cve.org/CVERecord?id=CVE-2023-26133"},{"name":"CVE-2024-47252","url":"https://www.cve.org/CVERecord?id=CVE-2024-47252"},{"name":"CVE-2025-30761","url":"https://www.cve.org/CVERecord?id=CVE-2025-30761"},{"name":"CVE-2025-36096","url":"https://www.cve.org/CVERecord?id=CVE-2025-36096"},{"name":"CVE-2025-3050","url":"https://www.cve.org/CVERecord?id=CVE-2025-3050"},{"name":"CVE-2025-38718","url":"https://www.cve.org/CVERecord?id=CVE-2025-38718"},{"name":"CVE-2025-38392","url":"https://www.cve.org/CVERecord?id=CVE-2025-38392"},{"name":"CVE-2023-53373","url":"https://www.cve.org/CVERecord?id=CVE-2023-53373"},{"name":"CVE-2025-32988","url":"https://www.cve.org/CVERecord?id=CVE-2025-32988"},{"name":"CVE-2025-0915","url":"https://www.cve.org/CVERecord?id=CVE-2025-0915"},{"name":"CVE-2024-52903","url":"https://www.cve.org/CVERecord?id=CVE-2024-52903"},{"name":"CVE-2025-38352","url":"https://www.cve.org/CVERecord?id=CVE-2025-38352"},{"name":"CVE-2025-30749","url":"https://www.cve.org/CVERecord?id=CVE-2025-30749"},{"name":"CVE-2023-45287","url":"https://www.cve.org/CVERecord?id=CVE-2023-45287"},{"name":"CVE-2024-56346","url":"https://www.cve.org/CVERecord?id=CVE-2024-56346"},{"name":"CVE-2025-38350","url":"https://www.cve.org/CVERecord?id=CVE-2025-38350"},{"name":"CVE-2025-1000","url":"https://www.cve.org/CVERecord?id=CVE-2025-1000"},{"name":"CVE-2022-31197","url":"https://www.cve.org/CVERecord?id=CVE-2022-31197"},{"name":"CVE-2025-40928","url":"https://www.cve.org/CVERecord?id=CVE-2025-40928"},{"name":"CVE-2022-50087","url":"https://www.cve.org/CVERecord?id=CVE-2022-50087"},{"name":"CVE-2025-38498","url":"https://www.cve.org/CVERecord?id=CVE-2025-38498"},{"name":"CVE-2025-53057","url":"https://www.cve.org/CVERecord?id=CVE-2025-53057"},{"name":"CVE-2022-3171","url":"https://www.cve.org/CVERecord?id=CVE-2022-3171"},{"name":"CVE-2025-49630","url":"https://www.cve.org/CVERecord?id=CVE-2025-49630"},{"name":"CVE-2025-53066","url":"https://www.cve.org/CVERecord?id=CVE-2025-53066"},{"name":"CVE-2025-33150","url":"https://www.cve.org/CVERecord?id=CVE-2025-33150"},{"name":"CVE-2025-47273","url":"https://www.cve.org/CVERecord?id=CVE-2025-47273"},{"name":"CVE-2024-6345","url":"https://www.cve.org/CVERecord?id=CVE-2024-6345"},{"name":"CVE-2024-57699","url":"https://www.cve.org/CVERecord?id=CVE-2024-57699"},{"name":"CVE-2024-47619","url":"https://www.cve.org/CVERecord?id=CVE-2024-47619"}],"links":[],"reference":"CERTFR-2025-AVI-1013","revisions":[{"description":"Version initiale","revision_date":"2025-11-14T00:00:00.000000"}],"risks":[{"description":"Ex\u00e9cution de code arbitraire \u00e0 distance"},{"description":"\u00c9l\u00e9vation de privil\u00e8ges"},{"description":"D\u00e9ni de service \u00e0 distance"},{"description":"Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"},{"description":"Atteinte \u00e0 l'int\u00e9grit\u00e9 des donn\u00e9es"},{"description":"Contournement de la politique de s\u00e9curit\u00e9"},{"description":"Non sp\u00e9cifi\u00e9 par l'\u00e9diteur"},{"description":"Injection SQL (SQLi)"}],"summary":"De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits IBM. Certaines d'entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.","title":"Multiples vuln\u00e9rabilit\u00e9s dans les produits IBM","vendor_advisories":[{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250959","url":"https://www.ibm.com/support/pages/node/7250959"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7249983","url":"https://www.ibm.com/support/pages/node/7249983"},{"published_at":"2025-11-11","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250785","url":"https://www.ibm.com/support/pages/node/7250785"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7249992","url":"https://www.ibm.com/support/pages/node/7249992"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7249994","url":"https://www.ibm.com/support/pages/node/7249994"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250921","url":"https://www.ibm.com/support/pages/node/7250921"},{"published_at":"2025-11-07","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250486","url":"https://www.ibm.com/support/pages/node/7250486"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250907","url":"https://www.ibm.com/support/pages/node/7250907"},{"published_at":"2025-11-07","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250395","url":"https://www.ibm.com/support/pages/node/7250395"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250956","url":"https://www.ibm.com/support/pages/node/7250956"},{"published_at":"2025-11-10","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250763","url":"https://www.ibm.com/support/pages/node/7250763"},{"published_at":"2025-11-26","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250474","url":"https://www.ibm.com/support/pages/node/7250474"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250971","url":"https://www.ibm.com/support/pages/node/7250971"},{"published_at":"2025-11-12","title":"Bulletin de s\u00e9curit\u00e9 IBM 7250926","url":"https://www.ibm.com/support/pages/node/7250926"},{"published_at":"2025-11-13","title":"Bulletin de s\u00e9curit\u00e9 IBM 7251173","url":"https://www.ibm.com/support/pages/node/7251173"}]}