CVE-2024-49792
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Feb 6, 2025
Updated: Feb 12, 2025
CWE ID 79
Summary
CVE-2024-49792 is a recently identified cross-site scripting (XSS) vulnerability affecting IBM ApplinX 11.1. An authenticated user can exploit this issue by embedding malicious JavaScript code into the WebUI. This code can then alter the intended functionality, leading to potential credential disclosure within a trusted session. The successful execution of such an attack could result in unauthorized access to sensitive information. IBM strongly advises users to apply the available patches to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- IBM Corporation