Skip to content

Commit 257cdac

Browse files
advisory-database[bot]advisory-database[bot]
committed
Publish Advisories
GHSA-3x55-3v35-wg88 GHSA-fpwf-jj2q-fxxh GHSA-jmh6-3m65-qgmg GHSA-vcxw-vmr7-hmxx GHSA-x5hh-r5wr-8mh7
1 parent e9e086a commit 257cdac

File tree

5 files changed

+180
-0
lines changed

5 files changed

+180
-0
lines changed

‎advisories/unreviewed/2025/01/GHSA-3x55-3v35-wg88/GHSA-3x55-3v35-wg88.json

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-3x55-3v35-wg88",
4+
"modified": "2025-01-18T18:30:46Z",
5+
"published": "2025-01-18T18:30:46Z",
6+
"aliases": [
7+
"CVE-2024-47113"
8+
],
9+
"details": "IBM ICP - Voice Gateway 1.0.2, 1.0.2.4, 1.0.3, 1.0.4, 1.0.5, 1.0.6. 1.0.7, 1.0.7.1, and 1.0.8 could allow remote attacker to send specially crafted XML statements, which would allow them to attacker to view or modify information in the XML document.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47113"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7175791"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-91"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-18T16:15:38Z"
35+
}
36+
}

‎advisories/unreviewed/2025/01/GHSA-fpwf-jj2q-fxxh/GHSA-fpwf-jj2q-fxxh.json

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-fpwf-jj2q-fxxh",
4+
"modified": "2025-01-18T18:30:47Z",
5+
"published": "2025-01-18T18:30:47Z",
6+
"aliases": [
7+
"CVE-2024-45662"
8+
],
9+
"details": "IBM Safer Payments 6.4.0.00 through 6.4.2.07, 6.5.0.00 through 6.5.0.05, and 6.6.0.00 through 6.6.0.03 could allow a remote attacker to cause a denial of service due to improper allocation of resources.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45662"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7173765"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-770"
30+
],
31+
"severity": "HIGH",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-18T17:15:07Z"
35+
}
36+
}

‎advisories/unreviewed/2025/01/GHSA-jmh6-3m65-qgmg/GHSA-jmh6-3m65-qgmg.json

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-jmh6-3m65-qgmg",
4+
"modified": "2025-01-18T18:30:47Z",
5+
"published": "2025-01-18T18:30:47Z",
6+
"aliases": [
7+
"CVE-2024-49354"
8+
],
9+
"details": "IBM Concert 1.0.0, 1.0.1, and 1.0.2 is vulnerable to sensitive information disclosure through specially crafted API Calls.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49354"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7174120"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-213"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-18T16:15:39Z"
35+
}
36+
}

‎advisories/unreviewed/2025/01/GHSA-vcxw-vmr7-hmxx/GHSA-vcxw-vmr7-hmxx.json

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-vcxw-vmr7-hmxx",
4+
"modified": "2025-01-18T18:30:47Z",
5+
"published": "2025-01-18T18:30:47Z",
6+
"aliases": [
7+
"CVE-2024-49824"
8+
],
9+
"details": "IBM Robotic Process Automation 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18 and \n\nIBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.18 and 23.0.0 through 23.0.18\n\ncould allow an authenticated user to perform unauthorized actions as a privileged user due to improper validation of client-side security enforcement.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49824"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7177587"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-602"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-18T16:15:39Z"
35+
}
36+
}

‎advisories/unreviewed/2025/01/GHSA-x5hh-r5wr-8mh7/GHSA-x5hh-r5wr-8mh7.json

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
{
2+
"schema_version": "1.4.0",
3+
"id": "GHSA-x5hh-r5wr-8mh7",
4+
"modified": "2025-01-18T18:30:46Z",
5+
"published": "2025-01-18T18:30:46Z",
6+
"aliases": [
7+
"CVE-2024-47106"
8+
],
9+
"details": "IBM Jazz for Service Management 1.1.3 through 1.1.3.22 could allow a remote attacker to obtain sensitive information from improper access restrictions that could aid in further attacks against the system.",
10+
"severity": [
11+
{
12+
"type": "CVSS_V3",
13+
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
14+
}
15+
],
16+
"affected": [],
17+
"references": [
18+
{
19+
"type": "ADVISORY",
20+
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-47106"
21+
},
22+
{
23+
"type": "WEB",
24+
"url": "https://www.ibm.com/support/pages/node/7178507"
25+
}
26+
],
27+
"database_specific": {
28+
"cwe_ids": [
29+
"CWE-552"
30+
],
31+
"severity": "MODERATE",
32+
"github_reviewed": false,
33+
"github_reviewed_at": null,
34+
"nvd_published_at": "2025-01-18T16:15:37Z"
35+
}
36+
}

0 commit comments

Comments
 (0)