by Kastro
Paper/Archive/CVE-2024-45076

CVE-2024-45076

IBM webMethods Integration — IBM webMethods Integration code execution

EPSS 0.5%CVSS 9.9
critical.is priorityof 100
39
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 45.8.458 × 209.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM webMethods Integration 10.15 could allow an authenticated user to upload and execute arbitrary files which could be executed on the underlying operating system.

Affected

ProductAffectedFixed inSource
webMethods Integration10.15–CNA

Scores by source

ibm (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refibm.com/support/pages/node/7167245