CVSS 3.1 Score 9.8 of 10 (high)


Published Feb 2, 2024
Updated: Mar 21, 2024
CWE ID 502


CVE-2024-22320 is a critical vulnerability affecting IBM Operational Decision Manager versions 8.10.3, 8.10.4,, 8.11,, and that could allow a remote authenticated attacker to execute arbitrary code on the system through unsafe deserialization. The vulnerability can be exploited by sending a specially crafted request, enabling the attacker to execute arbitrary code within the context of the SYSTEM user. This poses a high potential danger to organizations as it allows an attacker to gain unauthorized access and control over the affected system with high integrity and confidentiality impact levels. It is crucial for organizations using these IBM products to apply appropriate patches or updates provided by IBM to remediate this vulnerability promptly and mitigate the risk of exploitation.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-22320 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options