CVE-2024-49791

Summary

CVE-2024-49791 is a newly identified cross-site scripting (XSS) vulnerability affecting IBM ApplinX version 11.1. An authenticated user can exploit this weakness by embedding arbitrary JavaScript code in the Web UI, which may alter the intended functionality and potentially disclose sensitive credentials within a trusted session. Successful exploitation could lead to unauthorized access or data theft. IBM strongly recommends users update their systems to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.