CVE-2024-45076

IBM webMethods Integration code execution

CVSS 9.9 CRITICALEPSS 0.5%CWE-434

Vexday Risk Score

28Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 9.9EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 sep 2024Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Productos afectados

IBM · webMethods Integration

Referencias

https://www.ibm.com/support/pages/node/7167245