CVE-2024-41785
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 79
Summary
CVE-2024-41785 is a cross-site scripting (XSS) vulnerability affecting IBM Concert Software versions 1.0.0 and 1.0.1. An unauthenticated attacker can exploit this flaw by injecting malicious JavaScript code into the Web UI, potentially altering intended functionality and disclosing sensitive credentials within a trusted session. This issue poses a significant risk and requires immediate patching to prevent potential data breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.