CVE-2024-56493

Low CVSS: 3.3

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.

Vendor

Ibm

Product

Entirex

CWE

CWE-209

Yayın Tarihi

2025-02-27 15:15:39

Güncelleme

2025-07-07 18:25:51

Source Identifier

psirt@us.ibm.com

KEV Date Added

Kategoriler

CWE-209 Entirex LOW Ibm 2025

Referanslar

https://www.ibm.com/support/pages/node/7184194

Benzer Kayıtlar

Medium

CVE-2025-13044

IBM Concert 1.0.0 through 2.2.0 creates temporary files with predictable names, which allows local users to overwrite ar…

Medium

CVE-2026-1243

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authe…

Low

CVE-2025-66487

IBM Aspera Shares 1.9.9 through 1.11.0 does not properly rate limit the frequency that an authenticated user can send em…

Medium

CVE-2025-66486

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML co…

Medium

CVE-2025-66485

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to HTTP header injection, caused by improper validation of input by…

Medium

CVE-2025-66484

IBM Aspera Shares 1.9.9 through 1.11.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to…