CVE-2024-49793

CVSS 3.1 Score 5.4 of 10 (medium)

Details

Published Feb 6, 2025
Updated: Feb 12, 2025
CWE ID 79

Summary

CVE-2024-49793 is a newly disclosed cross-site scripting (XSS) vulnerability in IBM ApplinX 11.1. An authenticated user can exploit this flaw to inject malicious JavaScript code into the web user interface. This can alter the intended functionality and potentially lead to the disclosure of sensitive credentials within a trusted session. IBM has urged users to update their ApplinX installations as soon as possible to mitigate the risk of this vulnerability. Failure to do so may result in unauthorized access and other security breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share